{"id":"CVE-2024-33620","aliases":["EUVD-2024-34479","GHSA-577f-9hhg-fc2w"],"status":"published","title":"Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR...","description":"Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.","severity":{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00678,"percentile":0.52656,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-36"],"published":"2024-06-18T05:44:53Z","modified":"2026-06-17T07:32:06Z","products":[{"vendor":"fsas technologies inc.","product":"fujitsu business application id link manager ii"},{"vendor":"fsas technologies inc.","product":"fujitsu software id link manager"},{"vendor":"fsas technologies inc.","product":"fujitsu software time creator id link manager"},{"vendor":"fujitsu","product":"business_application_id_link_manager_ii"},{"vendor":"fujitsu","product":"id_link_manager"},{"vendor":"fujitsu","product":"time_creator_id_link_manager"}],"references":[{"url":"https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html","tags":["x_transferred"]},{"url":"https://jvn.jp/en/jp/JVN65171386/","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-33620"},{"url":"https://jvn.jp/en/jp/JVN65171386"},{"url":"https://github.com/advisories/GHSA-577f-9hhg-fc2w"}],"sources":{"cve":[{"id":"CVE-2024-33620","description":"Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.","status":"published","published":"2024-06-18T05:44:53.121Z","modified":"2024-08-13T19:17:23.562Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-36"],"updated_at":"2026-11-02T14:34:21.784174Z"}],"euvd":[{"id":"EUVD-2024-34479","description":"Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.","status":"published","published":"2024-06-18T05:44:53Z","modified":"2024-08-13T19:17:23Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-03T00:56:18.66143Z"}],"ghsa":[{"id":"GHSA-577f-9hhg-fc2w","title":"Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR...","description":"Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.","status":"published","published":"2024-06-18T06:30:40Z","modified":"2024-08-13T21:32:57Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-36"],"updated_at":"2026-11-02T14:57:57.461222Z"}],"nvd":[{"id":"CVE-2024-33620","description":"Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.","status":"published","published":"2024-06-18T06:15:11.053Z","modified":"2026-06-17T07:32:06.157Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-36"],"updated_at":"2026-11-02T14:10:05.620461Z"}]}}