CVE-2020-5001 MEDIUM

CVE-2020-5001: IBM Financial Transaction Manager path traversal

Vendor Ibm

Product Financial Transaction Manager

Weakness CWE-22 · Path traversal

Published March 1, 2023

Last update March 6, 2025

View on NVD All CVEs

CVSS base score

4.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

IBM Financial Transaction Manager 3.2.0 through 3.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 192953.

Key dates

02Disclosure timeline

March 1, 2023 CVE published

March 6, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-5001 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/22.html

Related vulnerabilities

04Related CVE

CVE-2026-20191 Cisco Catalyst Center Arbitrary File Read Vulnerability CVE-2026-56138 Authenticated Path Traversal in AIL framework /objects/item/diff Allows Reading Gzip-Compressed Files CVE-2026-11595 IBM WebSphere Application Server is affected by a Path Traversal vulnerability CVE-2026-49991 RustFS Snowball Auto-Extract: Path Traversal allows cross-bucket object injection CVE-2026-13503 antlr ANTLR4 tokenVocab Grammar Option TokenVocabParser.java getImportedVocabFile path traversal