CVE-2018-1847

Published: Sep 18, 2019Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) v2.0.0.0 through 2.0.0.5, v2.1.0.0 through 2.1.0.4, v2.1.1.0 through 2.1.1.4, and v3.0.0.0 through 3.0.0.8 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 150946.

Affected (4)

Products: Ibm: Financial Transaction Manager For Multiplatform

Ibm

1 product

Financial Transaction Manager For Multiplatform

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Financial Transaction Manager For Multiplatform	From 2.0.0.0 to 2.0.0.5
Ibm Financial Transaction Manager For Multiplatform	From 2.1.0.0 to 2.1.0.4
Ibm Financial Transaction Manager For Multiplatform	From 2.1.1.0 to 2.1.1.4
Ibm Financial Transaction Manager For Multiplatform	From 3.0.0.0 to 3.0.0.8