Description
IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories and send a specially crafted URL request to download arbitrary files from the system.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Data Risk Manager | IBM / Data Risk Manager | 2.0.1 | affected |
| Data Risk Manager | IBM / Data Risk Manager | 2.0.2 | affected |
| Data Risk Manager | IBM / Data Risk Manager | 2.0.3 | affected |
| Data Risk Manager | IBM / Data Risk Manager | 2.0.4 | affected |
| Data Risk Manager | IBM / Data Risk Manager | 2.0.5 | affected |
| Data Risk Manager | IBM / Data Risk Manager | 2.0.6 | affected |