IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An at…

A path traversal vulnerability has been identified in IBM App Connect Enterprise versions 13.0.1.0 through 13.0.7.2 and 12.0.1.0 through 12.0.12.27. The vulnerability allows remote attackers to traverse directories using specially crafted URL requests containing dot-dot sequences (/../). Successful exploitation could enable an attacker to write arbitrary files on the affected system. This represents a significant risk as it could lead to unauthorized file writes, potential code execution, or system compromise. The vulnerability is remotely exploitable without authentication. IBM has published a support advisory with remediation guidance. Affected organizations are advised to apply patches or mitigations as soon as possible.