CVE-2024-33620

Severity: high (CVSS 8.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-06-18 · updated 2026-06-17
Weakness: CWE-36

Description

Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.

Affected products

Fujitsu Business Application Id Link Manager Ii: through 1.8
Fujitsu Id Link Manager: 2.0
Fujitsu Time Creator Id Link Manager: 2.3.0, 2.3.1, 2.4, 2.5, 2.6, 2.7 (+4)

References

https://jvn.jp/en/jp/JVN65171386/
https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html
https://jvn.jp/en/jp/JVN65171386/
https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html

Get alerted when CVE-2024-33620 or the next vulnerability affects your stack