Find a vulnerability

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

2 vulnerabilities found for id_link_manager by fujitsu

CVE-2024-33620 (GCVE-0-2024-33620)

Vulnerability from nvd – Published: 2024-06-18 05:44 – Updated: 2024-08-13 19:17

Summary

Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.

Severity

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-12 17:27 UTC

CWE

Absolute path traversal
CWE-36 - Absolute Path Traversal

Assigner

jpcert jpcert root Scorecard

References

2 references

URL	Tags
https://www.fujitsu.com/jp/group/fsas/about/resou…
https://jvn.jp/en/jp/JVN65171386/

Impacted products

16 products

Vendor	Product	Version
Fsas Technologies Inc.	FUJITSU Business Application ID Link Manager II	Affected: V1.8 and earlier
Fsas Technologies Inc.	FUJITSU Software ID Link Manager	Affected: V2.0
Fsas Technologies Inc.	FUJITSU Software TIME CREATOR ID Link Manager	Affected: V2.3.0 Affected: V2.3.1 Affected: V2.4 Affected: V2.5 Affected: V2.6 Affected: and V2.7
Fsas Technologies Inc.	FUJITSU Software TIME CREATOR ID Link Manager	Affected: V3.0 Affected: V3.0.2 Affected: V3.0.2.1 Affected: and V3.0.3
fujitsu	business_application_id_link_manager_ii	Affected: 0 , ≤ 1.8 (custom) cpe:2.3:a:fujitsu:business_application_id_link_manager_ii::::::::
fujitsu	id_link_manager	Affected: 2.0 cpe:2.3:a:fujitsu:id_link_manager:2.0:::::::*
fujitsu	time_creator_id_link_manager	Affected: 2.3.0 cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.0:::::::*
fujitsu	time_creator_id_link_manager	Affected: 2.3.1 cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.1:::::::*
fujitsu	time_creator_id_link_manager	Affected: 2.4 cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.4:::::::*
fujitsu	time_creator_id_link_manager	Affected: 2.5 cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.5:::::::*
fujitsu	time_creator_id_link_manager	Affected: 2.6 cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.6:::::::*
fujitsu	time_creator_id_link_manager	Affected: 2.7 cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.7:::::::*
fujitsu	time_creator_id_link_manager	Affected: 3.0 cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0:::::::*
fujitsu	time_creator_id_link_manager	Affected: 3.0.2 cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2:::::::*
fujitsu	time_creator_id_link_manager	Affected: 3.0.2.1 cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2.1:::::::*
fujitsu	time_creator_id_link_manager	Affected: 3.0.3 cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.3:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T02:36:04.361Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/jp/JVN65171386/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:fujitsu:business_application_id_link_manager_ii:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "business_application_id_link_manager_ii",
            "vendor": "fujitsu",
            "versions": [
              {
                "lessThanOrEqual": "1.8",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:fujitsu:id_link_manager:2.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "id_link_manager",
            "vendor": "fujitsu",
            "versions": [
              {
                "status": "affected",
                "version": "2.0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "time_creator_id_link_manager",
            "vendor": "fujitsu",
            "versions": [
              {
                "status": "affected",
                "version": "2.3.0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "time_creator_id_link_manager",
            "vendor": "fujitsu",
            "versions": [
              {
                "status": "affected",
                "version": "2.3.1"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.4:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "time_creator_id_link_manager",
            "vendor": "fujitsu",
            "versions": [
              {
                "status": "affected",
                "version": "2.4"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.5:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "time_creator_id_link_manager",
            "vendor": "fujitsu",
            "versions": [
              {
                "status": "affected",
                "version": "2.5"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.6:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "time_creator_id_link_manager",
            "vendor": "fujitsu",
            "versions": [
              {
                "status": "affected",
                "version": "2.6"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.7:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "time_creator_id_link_manager",
            "vendor": "fujitsu",
            "versions": [
              {
                "status": "affected",
                "version": "2.7"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "time_creator_id_link_manager",
            "vendor": "fujitsu",
            "versions": [
              {
                "status": "affected",
                "version": "3.0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "time_creator_id_link_manager",
            "vendor": "fujitsu",
            "versions": [
              {
                "status": "affected",
                "version": "3.0.2"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "time_creator_id_link_manager",
            "vendor": "fujitsu",
            "versions": [
              {
                "status": "affected",
                "version": "3.0.2.1"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.3:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "time_creator_id_link_manager",
            "vendor": "fujitsu",
            "versions": [
              {
                "status": "affected",
                "version": "3.0.3"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.6,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-33620",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-12T17:27:20.527344Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-36",
                "description": "CWE-36 Absolute Path Traversal",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-13T19:17:23.562Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "FUJITSU Business Application ID Link Manager II",
          "vendor": "Fsas Technologies Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "V1.8 and earlier"
            }
          ]
        },
        {
          "product": "FUJITSU Software ID Link Manager",
          "vendor": "Fsas Technologies Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "V2.0"
            }
          ]
        },
        {
          "product": "FUJITSU Software TIME CREATOR ID Link Manager",
          "vendor": "Fsas Technologies Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "V2.3.0"
            },
            {
              "status": "affected",
              "version": " V2.3.1"
            },
            {
              "status": "affected",
              "version": " V2.4"
            },
            {
              "status": "affected",
              "version": " V2.5"
            },
            {
              "status": "affected",
              "version": " V2.6"
            },
            {
              "status": "affected",
              "version": " and V2.7"
            }
          ]
        },
        {
          "product": "FUJITSU Software TIME CREATOR ID Link Manager",
          "vendor": "Fsas Technologies Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "V3.0"
            },
            {
              "status": "affected",
              "version": " V3.0.2"
            },
            {
              "status": "affected",
              "version": " V3.0.2.1"
            },
            {
              "status": "affected",
              "version": " and V3.0.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Absolute path traversal",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-18T05:44:53.121Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
        },
        {
          "url": "https://jvn.jp/en/jp/JVN65171386/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2024-33620",
    "datePublished": "2024-06-18T05:44:53.121Z",
    "dateReserved": "2024-05-22T00:23:59.245Z",
    "dateUpdated": "2024-08-13T19:17:23.562Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}