CVE-2018-1884

MEDIUM

IBM Case Manager Remote Code Execution via Zip Slip Directory Traversal

Title source: llm
STIX 2.1

Description

IBM Case Manager 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0, and 5.3.3.0 is vulnerable to a "zip slip" vulnerability which could allow a remote attacker to execute code using directory traversal techniques. IBM X-Force ID: 151970.

References (3)

Core 3
Core References
Mitigation, Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=ibm10737897
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/105946
VDB Entry, Vendor Advisory vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/151970

Scores

CVSS v3 4.8
EPSS 0.0274
EPSS Percentile 84.3%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Details

CWE
CWE-22
Status published
Products (6)
ibm/case_manager 5.2.0.0
ibm/case_manager 5.2.0.4
ibm/case_manager 5.2.1.0
ibm/case_manager 5.2.1.7
ibm/case_manager 5.3.0.0
ibm/case_manager 5.3.3.0
Published Nov 12, 2018
Tracked Since Feb 18, 2026