CVE-2021-20517: Path Traversal

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/198435
• https://www.ibm.com/support/pages/node/6456955 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6456955

Frequently Asked Questions

• What is CVE-2021-20517?

  CVE-2021-20517 is a vulnerability in IBM WebSphere Application Server Network Deployment 8.5 and 9.0 that allows a remote authenticated attacker to traverse directories and read/delete arbitrary files on the system.

• What is the severity of CVE-2021-20517?

  CVE-2021-20517 has a severity rating of 8.8, which is considered high.

• How does CVE-2021-20517 impact IBM WebSphere Application Server ND?

  CVE-2021-20517 allows a remote authenticated attacker to traverse directories and potentially read/delete arbitrary files on IBM WebSphere Application Server ND 8.5 and 9.0.

• What is the IBM X-Force ID for CVE-2021-20517?

  The IBM X-Force ID for CVE-2021-20517 is 198435.

• How can I fix the CVE-2021-20517 vulnerability?

  To fix the CVE-2021-20517 vulnerability, it is recommended to apply the necessary patches provided by IBM and ensure the affected versions of IBM WebSphere Application Server ND are updated to the latest version.