Unrated severityNVD Advisory· Published Feb 21, 2019· Updated Sep 16, 2024
CVE-2018-2006
CVE-2018-2006
Description
IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to upload arbitrary files to the system. IBM X-Force ID: 155008.
Affected products
1- Range: 11
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.securityfocus.com/bid/107122mitrevdb-entryx_refsource_BID
- exchange.xforce.ibmcloud.com/vulnerabilities/155008mitrevdb-entryx_refsource_XF
- www.ibm.com/support/docview.wssmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.