CVE-2025-0799CWE-22

IBM App Connect Enterprise Arbitrary File Write

Medium · published February 6, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
41.7
In the wild
Unconfirmed
What it is

IBM App Connect enterprise 12.0.1.0 through 12.0.12.10 and 13.0.1.0 through 13.0.2.1 could allow an authenticated user to write to an arbitrary file on the system during bar configuration deployment due to improper pathname limitations on restricted directories.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00497 · 41.7th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2025-02-06T00:24Z
EPSS history
Timeline
  • 06 FEB 00:24Z
    IBM App Connect Enterprise Arbitrary File Write
    cvelistv5