What is CVE-2024-33620?

CVE-2024-33620 is a high-severity vulnerability in Fsas Technologies Inc. Fujitsu Business Application Id Link Manager Ii, classified under Absolute Path Traversal. CVSS score: 8.6/10. Published 2024-06-18.

How severe is CVE-2024-33620?

High severity. CVSS v3 base score is 8.6 out of 10.

Path Traversal in Fsas Technologies Inc. Fujitsu Business Application Id Link Manager Ii

CVE-2024-33620

Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.

EPSS: 0.007 (48.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N.

Affected products

Fsas Technologies Inc. Fujitsu Business Application Id Link Manager Ii — versions V1.8 and earlier
Fsas Technologies Inc. Fujitsu Software Id Link Manager — versions V2.0
Fsas Technologies Inc. Fujitsu Software Time Creator Id Link Manager — versions V2.3.0, V2.3.1, V2.4

Weakness classification (CWE)

CWE-36 — Absolute Path Traversal

References

Frequently asked questions

What is CVE-2024-33620?: CVE-2024-33620 is a high-severity vulnerability in Fsas Technologies Inc. Fujitsu Business Application Id Link Manager Ii, classified under Absolute Path Traversal. CVSS score: 8.6/10. Published 2024-06-18.
How severe is CVE-2024-33620?: High severity. CVSS v3 base score is 8.6 out of 10.