CVE-2026-3366

HIGH

InfoSphere Optim Test Data Fabrication is affected by Arbitrary File Read

Title source: cna
STIX 2.1

Description

IBM InfoSphere Optim Test Data Fabrication 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2.3, 1.0.2.4, 1.0.2.5, 1.0.2.6, 1.0.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system

References (1)

Core 1
Core References
Vendor Advisory vendor-advisory patch
https://www.ibm.com/support/pages/node/7272653

Scores

CVSS v3 7.5
EPSS 0.0060
EPSS Percentile 43.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-22
Status published
Products (11)
IBM/InfoSphere Optim Test Data Fabrication 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2.3, 1.0.2.4, 1.0.2.5, 1.0.2.6, 1.0.2.7 - 1.8.4
ibm/infosphere_optim_test_data_fabrication 1.0.0
ibm/infosphere_optim_test_data_fabrication 1.0.0.1
ibm/infosphere_optim_test_data_fabrication 1.0.0.2
ibm/infosphere_optim_test_data_fabrication 1.0.2
ibm/infosphere_optim_test_data_fabrication 1.0.2.2
ibm/infosphere_optim_test_data_fabrication 1.0.2.3
ibm/infosphere_optim_test_data_fabrication 1.0.2.4
ibm/infosphere_optim_test_data_fabrication 1.0.2.5
ibm/infosphere_optim_test_data_fabrication 1.0.2.6
... and 1 more
Published May 27, 2026
Tracked Since May 27, 2026