CVE-2024-33620
Estado: AplazadaAlta (8.6)—
Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
- Puntuación base: 8.6
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.68%
- Percentil entre todas las CVEs puntuadas: 51
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
CWE
- CWE-36
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2024-33620",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2024-33620",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2024-08-12T17:27:20.527344Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 8.6,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 4,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "vultures@jpcert.or.jp",
"affectedData": [
{
"vendor": "Fsas Technologies Inc.",
"product": "FUJITSU Business Application ID Link Manager II",
"versions": [
{
"status": "affected",
"version": "V1.8 and earlier"
}
]
},
{
"vendor": "Fsas Technologies Inc.",
"product": "FUJITSU Software ID Link Manager",
"versions": [
{
"status": "affected",
"version": "V2.0"
}
]
},
{
"vendor": "Fsas Technologies Inc.",
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"versions": [
{
"status": "affected",
"version": "V2.3.0"
},
{
"status": "affected",
"version": " V2.3.1"
},
{
"status": "affected",
"version": " V2.4"
},
{
"status": "affected",
"version": " V2.5"
},
{
"status": "affected",
"version": " V2.6"
},
{
"status": "affected",
"version": " and V2.7"
}
]
},
{
"vendor": "Fsas Technologies Inc.",
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"versions": [
{
"status": "affected",
"version": "V3.0"
},
{
"status": "affected",
"version": " V3.0.2"
},
{
"status": "affected",
"version": " V3.0.2.1"
},
{
"status": "affected",
"version": " and V3.0.3"
}
]
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"cpes": [
"cpe:2.3:a:fujitsu:business_application_id_link_manager_ii:*:*:*:*:*:*:*:*"
],
"vendor": "fujitsu",
"product": "business_application_id_link_manager_ii",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "1.8"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:fujitsu:id_link_manager:2.0:*:*:*:*:*:*:*"
],
"vendor": "fujitsu",
"product": "id_link_manager",
"versions": [
{
"status": "affected",
"version": "2.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.0:*:*:*:*:*:*:*"
],
"vendor": "fujitsu",
"product": "time_creator_id_link_manager",
"versions": [
{
"status": "affected",
"version": "2.3.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.1:*:*:*:*:*:*:*"
],
"vendor": "fujitsu",
"product": "time_creator_id_link_manager",
"versions": [
{
"status": "affected",
"version": "2.3.1"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.4:*:*:*:*:*:*:*"
],
"vendor": "fujitsu",
"product": "time_creator_id_link_manager",
"versions": [
{
"status": "affected",
"version": "2.4"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.5:*:*:*:*:*:*:*"
],
"vendor": "fujitsu",
"product": "time_creator_id_link_manager",
"versions": [
{
"status": "affected",
"version": "2.5"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.6:*:*:*:*:*:*:*"
],
"vendor": "fujitsu",
"product": "time_creator_id_link_manager",
"versions": [
{
"status": "affected",
"version": "2.6"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.7:*:*:*:*:*:*:*"
],
"vendor": "fujitsu",
"product": "time_creator_id_link_manager",
"versions": [
{
"status": "affected",
"version": "2.7"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0:*:*:*:*:*:*:*"
],
"vendor": "fujitsu",
"product": "time_creator_id_link_manager",
"versions": [
{
"status": "affected",
"version": "3.0"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2:*:*:*:*:*:*:*"
],
"vendor": "fujitsu",
"product": "time_creator_id_link_manager",
"versions": [
{
"status": "affected",
"version": "3.0.2"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2.1:*:*:*:*:*:*:*"
],
"vendor": "fujitsu",
"product": "time_creator_id_link_manager",
"versions": [
{
"status": "affected",
"version": "3.0.2.1"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.3:*:*:*:*:*:*:*"
],
"vendor": "fujitsu",
"product": "time_creator_id_link_manager",
"versions": [
{
"status": "affected",
"version": "3.0.3"
}
],
"defaultStatus": "unknown"
}
]
}
],
"published": "2024-06-18T06:15:11.053",
"references": [
{
"url": "https://jvn.jp/en/jp/JVN65171386/",
"source": "vultures@jpcert.or.jp"
},
{
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html",
"source": "vultures@jpcert.or.jp"
},
{
"url": "https://jvn.jp/en/jp/JVN65171386/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Deferred",
"weaknesses": [
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"description": [
{
"lang": "en",
"value": "CWE-36"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker."
},
{
"lang": "es",
"value": "Existe una vulnerabilidad de path traversal absoluta en ID Link Manager y FUJITSU Software TIME CREATOR. Si se explota esta vulnerabilidad, un atacante remoto no autenticado puede recuperar el contenido del archivo, incluida la información confidencial del servidor."
}
],
"lastModified": "2026-06-17T07:32:06.157",
"sourceIdentifier": "vultures@jpcert.or.jp"
}