CVE-2024-51453

IBM Sterling Secure Proxy 6.2.0.0 through 6.2.0.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
References
Link Resource
https://www.ibm.com/support/pages/node/7234887 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:ibm:sterling_secure_proxy:*:*:*:*:*:*:*:*

History

09 Jun 2025, 18:58

Type Values Removed Values Added
CPE cpe:2.3:a:ibm:sterling_secure_proxy:*:*:*:*:*:*:*:*
Summary
  • (es) IBM Sterling Secure Proxy 6.2.0.0 a 6.2.0.1 podría permitir que un atacante remoto acceda a directorios del sistema. Un atacante podría enviar una solicitud URL especialmente manipulada que contenga secuencias "punto punto" (/../) para ver archivos arbitrarios en el sistema.
First Time Ibm sterling Secure Proxy
Ibm
References () https://www.ibm.com/support/pages/node/7234887 - () https://www.ibm.com/support/pages/node/7234887 - Vendor Advisory

28 May 2025, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-05-28 16:15

Updated : 2025-06-09 18:58


NVD link : CVE-2024-51453

Mitre link : CVE-2024-51453

CVE.ORG link : CVE-2024-51453


JSON object : View

Products Affected

ibm

  • sterling_secure_proxy
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')