Directory Traversal Vulnerability in IBM Robotic Process Automation by IBM

CVE-2018-2006

Summary

IBM Robotic Process Automation with Automation Anywhere 11 is susceptible to a directory traversal vulnerability. By crafting a malicious URL that includes directory traversal sequences (e.g., /../), an attacker could gain unauthorized access to various directories on the system. This exploitation may allow the attacker to upload arbitrary files, potentially compromising the integrity and confidentiality of the system. Security measures should be taken to mitigate this risk and protect sensitive data.

References