Description
IBM webMethods Integration 10.15 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | webMethods Integration | 10.15 | — |
Advisories 1
- VA-24-254-01 IBM webMethods Integration Multiple Vulnerabilities CISA ICS & IT advisories · Sep 10, 2024