Directory Traversal Vulnerability in IBM WebSphere Application Server

CVE-2021-20517

Summary

IBM WebSphere Application Server Network Deployment versions 8.5 and 9.0 are susceptible to a directory traversal vulnerability that could be exploited by a remote authenticated attacker. By crafting a malicious URL request containing 'dot dot' sequences (/../), an attacker may gain unauthorized access to read or delete arbitrary files on the server. This vulnerability poses a significant risk to the integrity of the system and the confidentiality of the data it manages. To prevent potential attacks, system administrators should apply relevant security patches and ensure that their configurations are properly secured.

References