Documentation Offline
Monthly
Remote code execution in IBM Documentation Offline 1.0.0 through 1.4.1 allows an attacker to run arbitrary code by abusing improper control of file paths (CWE-73). The flaw is reachable over the network without authentication or user interaction per the vendor-assigned CVSS 9.8 vector, giving an attacker full read/write/execution impact on the host. No public exploit has been identified at time of analysis, and the issue is not listed in CISA KEV.
Remote code execution in IBM Documentation Offline 1.0.0 through 1.4.1 stems from improper neutralization of output written to logs (CWE-117), which a remote attacker can leverage to run arbitrary code with total impact to confidentiality, integrity, and availability. IBM has published a fix, and the vendor CVSS of 9.8 reflects an unauthenticated network-reachable vector; however, EPSS is low (0.27%, 19th percentile) and there is no public exploit identified at time of analysis, so exposure appears theoretical rather than active. Note a signal conflict: the root-cause weakness is log injection, yet the stated impact is code execution - the intermediate mechanism is not documented in the available data.
Path traversal in IBM Documentation Offline 1.0.0 through 1.4.1 enables unauthenticated remote attackers to read arbitrary files from the underlying server filesystem. The CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N vector confirms fully network-accessible exploitation with no privileges or user interaction required, resulting in high confidentiality impact but no integrity or availability loss. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV; however, the trivial attack complexity and zero-authentication requirement make exposed instances an immediate patching priority.
Session token forgery is possible in IBM Documentation Offline versions 1.0.0 through 1.4.1 because the application uses a hardcoded cryptographic key to generate or validate session tokens. An unauthenticated remote attacker who recovers the embedded key - via binary analysis, decompilation, or source exposure - can craft arbitrary valid session tokens and impersonate any authenticated user without supplying credentials. IBM has released a patch (advisory 7283484); no public exploit or CISA KEV listing has been identified at time of analysis.
Information disclosure in IBM Documentation Offline 1.0.0 through 1.4.1 exposes sensitive documentation content to unauthenticated adjacent network attackers due to the server binding to an unrestricted IP address (0.0.0.0 or equivalent) rather than restricting to localhost. The CVSS vector (AV:A/PR:N) confirms exploitation requires no credentials and is limited to the local network segment - internet-facing exploitation is not possible. No public exploit code and no active exploitation (CISA KEV) have been identified at time of analysis; a vendor patch is available.
Remote code execution in IBM Documentation Offline 1.0.0 through 1.4.1 allows an attacker to run arbitrary code by abusing improper control of file paths (CWE-73). The flaw is reachable over the network without authentication or user interaction per the vendor-assigned CVSS 9.8 vector, giving an attacker full read/write/execution impact on the host. No public exploit has been identified at time of analysis, and the issue is not listed in CISA KEV.
Remote code execution in IBM Documentation Offline 1.0.0 through 1.4.1 stems from improper neutralization of output written to logs (CWE-117), which a remote attacker can leverage to run arbitrary code with total impact to confidentiality, integrity, and availability. IBM has published a fix, and the vendor CVSS of 9.8 reflects an unauthenticated network-reachable vector; however, EPSS is low (0.27%, 19th percentile) and there is no public exploit identified at time of analysis, so exposure appears theoretical rather than active. Note a signal conflict: the root-cause weakness is log injection, yet the stated impact is code execution - the intermediate mechanism is not documented in the available data.
Path traversal in IBM Documentation Offline 1.0.0 through 1.4.1 enables unauthenticated remote attackers to read arbitrary files from the underlying server filesystem. The CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N vector confirms fully network-accessible exploitation with no privileges or user interaction required, resulting in high confidentiality impact but no integrity or availability loss. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV; however, the trivial attack complexity and zero-authentication requirement make exposed instances an immediate patching priority.
Session token forgery is possible in IBM Documentation Offline versions 1.0.0 through 1.4.1 because the application uses a hardcoded cryptographic key to generate or validate session tokens. An unauthenticated remote attacker who recovers the embedded key - via binary analysis, decompilation, or source exposure - can craft arbitrary valid session tokens and impersonate any authenticated user without supplying credentials. IBM has released a patch (advisory 7283484); no public exploit or CISA KEV listing has been identified at time of analysis.
Information disclosure in IBM Documentation Offline 1.0.0 through 1.4.1 exposes sensitive documentation content to unauthenticated adjacent network attackers due to the server binding to an unrestricted IP address (0.0.0.0 or equivalent) rather than restricting to localhost. The CVSS vector (AV:A/PR:N) confirms exploitation requires no credentials and is limited to the local network segment - internet-facing exploitation is not possible. No public exploit code and no active exploitation (CISA KEV) have been identified at time of analysis; a vendor patch is available.