CVE-2022-2265 - Path traversal in Identity and Directory Management System

Back Back to CVE browser

HIGH

Path traversal in Identity and Directory Management System

Published Sep 21, 2022

7.5

HIGH

CVSS 3.1

EPSS 0.85%

Description

The Identity and Directory Management System developed by Çekino Bilgi Teknolojileri before version 2.1.25 has an unauthenticated Path traversal vulnerability. This has been fixed in the version 2.1.25

Affected products

Vendor Çekino Bilgi Teknolojileri Product Çekino Bilgi Teknolojileri Default
unaffected
- Version
  unspecified
  Status
  affected
  Constraints
  <2.1.25

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Çekino Bilgi Teknolojileri

unaffected

Version	Status	Constraints
unspecified	affected	<2.1.25

Remediation

Vendor solution

Vulnerable Identity and Directory Management System module should be updated to the 2.1.25 version provided by the vendor.

Weaknesses (2)

CWE-22

Path Traversal

CWE-35

References (2)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0636
government-resource
https://www.usom.gov.tr/bildirim/tr-22-0636
government-resourcebroken-linkThird Party Advisory

Link	Providers	Tags
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0636		government-resource
https://www.usom.gov.tr/bildirim/tr-22-0636		government-resourcebroken-linkThird Party Advisory