Vulnerability · Published Jun 18, 2024 · Assigned by jpcert
CVE-2024-33620
High 8.6
In plain English
A high-severity security flaw in FUJITSU Business Application ID Link Manager II from Fsas Technologies Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).
Severity (CVSS 3.1)8.6High
Exploit odds (30 days)0.7%top 47.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Fsas Technologies Inc. | FUJITSU Business Application ID Link Manager II | V1.8 and earlier |
| Fsas Technologies Inc. | FUJITSU Software ID Link Manager | V2.0 |
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager | V2.3.0 V2.3.1 V2.4 V2.5 V2.6 and V2.7 |
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager | V3.0 V3.0.2 V3.0.2.1 and V3.0.3 |
Weakness: CWE-36 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N