CVE-2002-1559: Directory traversal vulnerability in ion-p.exe (aka ion-p) allows remote attackers to read arbitrary files...

Security readout for executives and security teams

CVE-2002-1559 describes a remote file-read flaw in ion-p.exe, also called ion-p. If an exposed instance is vulnerable, an attacker could request files outside the intended web content area, potentially exposing sensitive local files. Exposure is likely limited to systems still running ion-p.exe or ion-p on a reachable web server. The source bundle does not identify vendor, product versions, package names, or CPEs. Prioritize only if legacy web servers or archived applications may still expose ion-p.exe. The business risk is unauthorized disclosure of local files, but available sources do not prove broad current exposure. Mitigation focus: Inventory web servers for ion-p.exe or ion-p components.; Remove or disable the component if it is unused.; Check original vendor or platform guidance if still deployed..

Prepared

Jul 1, 2026, 00:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.