vendor:
InfoPrint 4247-Z03 Impact Matrix Printer
by:
Raif Berkay Dincel
7.5
CVSS
HIGH
Directory Traversal
22
CWE
Product Name: InfoPrint 4247-Z03 Impact Matrix Printer
Affected Version From: 1.11
Affected Version To: 1.11
Patch Exists: NO
Related CWE: N/A
CPE: a:ibm:infoprint_4247-z03_impact_matrix_printer
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Linux Mint, Windows 10
2020
IBM InfoPrint 4247-Z03 Impact Matrix Printer – Directory Traversal
A directory traversal vulnerability exists in IBM InfoPrint 4247-Z03 Impact Matrix Printer, which allows an attacker to access sensitive files outside of the web root directory. This vulnerability is due to the application not properly sanitizing user-supplied input. An attacker can exploit this vulnerability by sending a specially crafted HTTP request containing directory traversal characters. Successful exploitation of this vulnerability could allow an attacker to access sensitive files outside of the web root directory.
Mitigation:
Input validation should be used to prevent directory traversal attacks. All user-supplied input should be validated and filtered for malicious characters. Additionally, access to sensitive files should be restricted to only those users who need access.
