Improper Handling of File Names that Identify Virtual Resources
CWE-66
The product does not handle or incorrectly handles a file name that identifies a virtual resource that is not directly specified within the directory that is associated with the file name.
We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 9.8.
Latest Improper Handling of File Names that Identify Virtual Resources vulnerabilities
- 9.8 Critical severity
IdentityIQ: Improper Handling of File Names that Identify Virtual Resources
IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p2, IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p5, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p8, and all prior versions allow HTTP/HTTPS access to static content in the IdentityIQ applicati