Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in the CIM server in IBM Director before 5.20.3 Service Update 2 on Windows allows remote attackers to load and execute arbitrary local DLL code via a .. (dot dot) in a /CIMListener/ URI in an M-POST request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Director CIM服务器本地权限提升漏洞
Vulnerability Description
IBM Director是行业领先的Intel架构系统远程工作组系统管理软件。 IBM Director组件中捆绑了一个CIM服务程序，用于监听传送给本地consumer的indication请求。这些consumer是在系统上的动态链接库或共享对象中实现的。由于没有对consumer名称守护程序检查Windows路径元字符(\)，因此可以遍历文件系统指定系统上的任意库。CIM服务器会加载指定的DLL并调用其初始化函数PegasusCreateProvider(const char *)。 仅有能够向目标
CVSS Information
N/A
Vulnerability Type
N/A