CVE-2018-1884 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	4.8 MEDIUM	LOCAL	LOW	LOW	CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Affected Products (NVD)

Vendor	Product	Version
ibm	case_manager	5.2.0.0
ibm	case_manager	5.2.0.4
ibm	case_manager	5.2.1.0
ibm	case_manager	5.2.1.7
ibm	case_manager	5.3.0.0
ibm	case_manager	5.3.3.0

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References

http://www.ibm.com/support/docview.wss?uid=ibm10737897

http://www.securityfocus.com/bid/105946

https://exchange.xforce.ibmcloud.com/vulnerabilities/151970

http://www.ibm.com/support/docview.wss?uid=ibm10737897

http://www.securityfocus.com/bid/105946

https://exchange.xforce.ibmcloud.com/vulnerabilities/151970