CVE-2022-2265CWE-35
Path traversal in Identity and Directory Management System
High · published September 21, 2022
What it is
The Identity and Directory Management System developed by Çekino Bilgi Teknolojileri before version 2.1.25 has an unauthenticated Path traversal vulnerability. This has been fixed in the version 2.1.25
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00874 · 58.5th percentile
- Weakness
- CWE-35 · Path Traversal: '.../...//'
- Published
- 2022-09-21T13:45Z
EPSS history
Timeline