CVE-2018-1884 IBM Case Manager 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0, and 5.3.3.0 is vulnerable to a "zip slip" vulnerability which could allow a remote attacker to execute code using directory traversal tech...
HighCVSS 7.8
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Case Manager 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0, and 5.3.3.0 is vulnerable to a "zip slip" vulnerability which could allow a remote attacker to execute code using directory traversal techniques. IBM X-Force ID: 151970.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm case manager | = 5.2.0.0 | No fix listed |
| ibm case manager | = 5.2.0.4 | No fix listed |
| ibm case manager | = 5.2.1.0 | No fix listed |
| ibm case manager | = 5.2.1.7 | No fix listed |
| ibm case manager | = 5.3.0.0 | No fix listed |
| ibm case manager | = 5.3.3.0 | No fix listed |
References
- www.ibm.com mitigation vendor-advisory
- 105946 third-party-advisory vdb-entry
- ibm-case-cve20181884-code-exec(151970) vdb-entry vendor-advisory