Directory Listing Exposure in IBM Content Navigator by IBM

CVE-2025-27906

What is CVE-2025-27906?

IBM Content Navigator versions 3.0.11, 3.0.15, 3.1.0, and 3.2.0 have a vulnerability that may allow unauthorized users to access the directory listing of the application through specific URLs. While users can see the available application files and directories in their web browser, they cannot read or modify the file contents. It's crucial for organizations using these versions to take immediate action to mitigate this exposure and ensure that sensitive data remains secure.

References