cve/2023/CVE-2023-35016.md

### [CVE-2023-35016](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35016)
![](https://img.shields.io/static/v1?label=Product&message=Security%20Verify%20Governance%2C%20Identity%20Manager&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%2010.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')&color=brighgreen)

### Description

IBM Security Verify Governance, Identity Manager 10.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.  IBM X-Force ID:  257772.

### POC

#### Reference
- https://www.ibm.com/support/pages/node/7014397

#### Github
No PoCs found on GitHub currently.