What is the vulnerability ID for this security issue?

The vulnerability ID for this security issue is CVE-2022-33164.

What is the severity level of CVE-2022-33164?

The severity level of CVE-2022-33164 is critical with a score of 9.1.

Which IBM product is affected by CVE-2022-33164?

IBM Security Directory Integrator version 7.2.0 and IBM Security Directory Server version 7.2.0 are affected by CVE-2022-33164.

Are there any references for CVE-2022-33164?

Yes, you can find references for CVE-2022-33164 at the following links: [IBM X-Force ID: 228579](https://exchange.xforce.ibmcloud.com/vulnerabilities/228579) and [IBM support page](https://www.ibm.com/support/pages/node/7031021)

Vulnerability/
CVE-2022-33164

critical

9.1

CWE

8/9/2023

26/9/2024

CVE-2022-33164: IBM Security Directory Server path traversal

Q: How can a remote attacker exploit CVE-2022-33164?

A remote attacker can exploit CVE-2022-33164 by sending a specially crafted URL request containing "dot dot" sequences (/../) to view or write to arbitrary files on the system.

First published: Fri Sep 08 2023(Updated: )

IBM Security Directory Server 7.2.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view or write to arbitrary files on the system. IBM X-Force ID: 228579.

Credit: psirt@us.ibm.com psirt@us.ibm.com

Affected Software	Affected Version	How to fix
IBM Security Directory Server	=7.2.0
	<=7.2.0

Remedy

https://www.ibm.com/support/pages/node/7031021

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

IBM-7031021

Frequently Asked Questions

What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2022-33164.
What is the severity level of CVE-2022-33164?
The severity level of CVE-2022-33164 is critical with a score of 9.1.
Which IBM product is affected by CVE-2022-33164?
IBM Security Directory Integrator version 7.2.0 and IBM Security Directory Server version 7.2.0 are affected by CVE-2022-33164.
How can a remote attacker exploit CVE-2022-33164?
A remote attacker can exploit CVE-2022-33164 by sending a specially crafted URL request containing "dot dot" sequences (/../) to view or write to arbitrary files on the system.
Are there any references for CVE-2022-33164?
Yes, you can find references for CVE-2022-33164 at the following links: [IBM X-Force ID: 228579](https://exchange.xforce.ibmcloud.com/vulnerabilities/228579) and [IBM support page](https://www.ibm.com/support/pages/node/7031021)

collector/nvd-api
collector/nvd-index
agent/author
agent/type
agent/references
agent/remedy
agent/weakness
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/severity
agent/title
agent/first-publish-date
agent/tags
agent/description
agent/softwarecombine
agent/event
collector/ibm-support
source/IBM
agent/software-canonical-lookup
vendor/ibm
canonical/ibm security directory server
version/ibm security directory server/7.2.0
canonical/ibm security directory integrator
version/ibm security directory integrator/7.2.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.