CVE-2022-43858
Published: 22 December 2022
Summary
CVE-2022-43858 is a medium-severity Path Traversal (CWE-22) vulnerability in Ibm I. Its CVSS base score is 4.3 (Medium).
Operationally, ranked in the top 46.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-46828
Vulnerability details
IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to access the file system and download files they are authorized to but not while using this interface. The remote authenticated user can bypass the interface checks…
more
by modifying a parameter thereby gaining access to their files through this interface. IBM X-Force ID: 239303.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Validates pathnames and filenames to prevent traversal outside intended directories.