| Package | Affected versions | Patched versions |
|---|---|---|
| algo one | = 4.9.1 | |
| algo risk application | = 2.4.0.1= 2.4.1= 2.4.2= 2.5.0= 2.5.1= 2.5.2= 2.5.3= 2.5.4= 2.5.5= 2.5.5.2= 2.5.6= 2.5.7.1= 2.5.7.2= 2.5.8= 4.5.1= 4.5.2= 4.5.3= 4.5.4= 4.6.0= 4.6.1= 4.7.0= 4.7.1= 4.8.0= 4.9.0= 4.9.1 |
Multiple directory traversal vulnerabilities in Algo Risk Application (ARA) 2.4.0.1 through 4.9.1 in IBM Algo One allow remote authenticated users to bypass intended access restrictions via a crafted pathname for a (1) configuration or (2) JAR file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free