IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 296010.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: ibm
Published: 2024-07-15T02:09:40.787Z
Updated: 2024-08-02T04:26:16.016Z
Reserved: 2024-06-28T09:34:35.183Z
Link: CVE-2024-39741
Vulnrichment
Updated: 2024-08-02T04:26:16.016Z
NVD
Status : Modified
Published: 2024-07-15T03:15:02.793
Modified: 2024-11-21T09:28:19.777
Link: CVE-2024-39741
Redhat
No data.