CVE-2024-41784

HIGH Year: 2024
CVSS v3 Score
7.5
High
Weakness Type
CWE-32
View all →

Vulnerability Description

IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, and 6.1.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot dot" sequences (/.../) to view arbitrary files on the system.

Related Vulnerabilities

CVE-2024-6049

HIGH
CVSS:7.5(High)

The web server of Lawo AG vsm LTC Time Sync (vTimeSync) is affected by a "..." (triple dot) path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacke...

CWE-322024

CVE-2024-6049

HIGH
CVSS:7.5(High)

The web server of Lawo AG vsm LTC Time Sync (vTimeSync) is affected by a "..." (triple dot) path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacke...

CWE-322024