PT-2024-25380 · Fujitsu · Fujitsu Software Time Creator

Christian Demko · Published 2024-06-18 · Updated 2024-08-13 · CVE-2024-33620

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ID Link Manager (affected versions not specified) FUJITSU Software TIME CREATOR (affected versions not specified)

Description An absolute path traversal issue exists, allowing an unauthenticated remote attacker to retrieve file contents, including sensitive information, from the server.

Recommendations For ID Link Manager, at the moment, there is no information about a newer version that contains a fix for this issue. For FUJITSU Software TIME CREATOR, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-36

Related Identifiers

CVE-2024-33620

Affected Products

Fujitsu Software Time Creator

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-33620 · Security Note
• https://fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html · Note
• https://t.me/cvenotify/83601 · Telegram Post
• https://t.me/cvenotify/90405 · Telegram Post
• https://twitter.com/TheHackerWire/status/1803750157709636006 · Twitter Post
• https://jvn.jp/en/jp/JVN65171386 · Note