CVE-2019-4384: IBM Campaign 9.1.2 and 10.1 could allow a remote attacker to traverse directories on the system.

Security readout for executives and security teams

IBM Campaign 9.1.2 and 10.1 have a directory traversal flaw that could let a remote, low-privileged attacker read arbitrary files from the host. The main business risk is unauthorized disclosure of configuration, application, or system data from affected Campaign servers. Exposure is limited to IBM Campaign versions 9.1.2 and 10.1. Risk is highest where the Campaign web interface is reachable by users with low-level access. The source bundle does not name other IBM products, cloud services, or versions as affected. Treat as a moderate-priority exposure issue. It is not reported as actively exploited in the supplied sources, but affected Campaign servers may leak sensitive files. Prioritize remediation for internet-facing or broadly accessible deployments. Mitigation focus: Review IBM advisory guidance for CVE-2019-4384 and apply the vendor-provided remediation.; Inventory IBM Campaign deployments and prioritize versions 9.1.2 and 10.1.; Restrict access to Campaign interfaces to trusted networks and authorized users..

Prepared

Jun 1, 2026, 14:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.