Read the docs
TI-2024-22204 Aliases CVE-2024-33620GHSA-577f-9hhg-fc2w

Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME…

Priority MEDIUM 46CWE-36Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00678 52nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Fsas Technologies Inc.FUJITSU Business Application ID Link Manager IIup to V1.8—No fix listedCNA
Fsas Technologies Inc.FUJITSU Software ID Link ManagerV2.0—No fix listedCNA
Fsas Technologies Inc.FUJITSU Software TIME CREATOR ID Link ManagerV2.3.0; V2.3.1; V2.4; V2.5; V2.6; and V2.7—No fix listedCNA
Fsas Technologies Inc.FUJITSU Software TIME CREATOR ID Link ManagerV3.0; V3.0.2; V3.0.2.1; and V3.0.3—No fix listedCNA
  • FUJITSU Business Application ID Link Manager II VendorFsas Technologies Inc. Affected up to V1.8 Fixed in — No fix listed CNA
  • FUJITSU Software ID Link Manager VendorFsas Technologies Inc. Affected V2.0 Fixed in — No fix listed CNA
  • FUJITSU Software TIME CREATOR ID Link Manager VendorFsas Technologies Inc. Affected V2.3.0; V2.3.1; V2.4; V2.5; V2.6; and V2.7 Fixed in — No fix listed CNA
  • FUJITSU Software TIME CREATOR ID Link Manager VendorFsas Technologies Inc. Affected V3.0; V3.0.2; V3.0.2.1; and V3.0.3 Fixed in — No fix listed CNA

CPE names CISA-ADP · 12

CPEVersionsRoleVendor
cpe:2.3:a:fujitsu:business_application_id_link_manager_ii:*:*:*:*:*:*:*:*——Fujitsu
cpe:2.3:a:fujitsu:id_link_manager:2.0:*:*:*:*:*:*:*2.0—Fujitsu
cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.0:*:*:*:*:*:*:*2.3.0—Fujitsu
cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.1:*:*:*:*:*:*:*2.3.1—Fujitsu
cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.4:*:*:*:*:*:*:*2.4—Fujitsu
cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.5:*:*:*:*:*:*:*2.5—Fujitsu
cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.6:*:*:*:*:*:*:*2.6—Fujitsu
cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.7:*:*:*:*:*:*:*2.7—Fujitsu
cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0:*:*:*:*:*:*:*3.0—Fujitsu
cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2:*:*:*:*:*:*:*3.0.2—Fujitsu
  • cpe:2.3:a:fujitsu:business_application_id_link_manager_ii:*:*:*:*:*:*:*:* Versions — — ·Fujitsu
  • cpe:2.3:a:fujitsu:id_link_manager:2.0:*:*:*:*:*:*:* Versions 2.0 — ·Fujitsu
  • cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.0:*:*:*:*:*:*:* Versions 2.3.0 — ·Fujitsu
  • cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.1:*:*:*:*:*:*:* Versions 2.3.1 — ·Fujitsu
  • cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.4:*:*:*:*:*:*:* Versions 2.4 — ·Fujitsu
  • cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.5:*:*:*:*:*:*:* Versions 2.5 — ·Fujitsu
  • cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.6:*:*:*:*:*:*:* Versions 2.6 — ·Fujitsu
  • cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.7:*:*:*:*:*:*:* Versions 2.7 — ·Fujitsu
  • cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0:*:*:*:*:*:*:* Versions 3.0 — ·Fujitsu
  • cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 — ·Fujitsu
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2.1:*:*:*:*:*:*:*3.0.2.1—Fujitsu
cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.3:*:*:*:*:*:*:*3.0.3—Fujitsu
  • cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2.1:*:*:*:*:*:*:* Versions 3.0.2.1 — ·Fujitsu
  • cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.3:*:*:*:*:*:*:* Versions 3.0.3 — ·Fujitsu

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-33620
  2. 2026-10-03 Alias added: GHSA-577f-9hhg-fc2w

References

Other 2

  • TI-2026-19353 Uncontrolled search path in Fsas Technologies Inc. ServerView Agents for Windows CVSS 4.0HIGH 8.4
  • TI-2025-38792 Incorrect default permissions in Fsas Technologies Inc. ETERNUS SF AdvancedCopy Manager… CVSS 4.0HIGH 8.4
  • TI-2026-24853 Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier. CVSS 4.0HIGH 8.5
  • TI-2026-22144 Incorrect permission assignment in Fsas Technologies Inc. ServerView Agents for Windows CVSS 4.0HIGH 8.5
  • TI-2024-24233 Use of uninitialized resource in Fsas Technologies Inc. IPCOM EX2 Series CVSS 3.1MEDIUM 5.3
  • TI-2024-22206 Missing authentication in Fsas Technologies Inc. FUJITSU Business Application ID Link… CVSS 3.1MEDIUM 6.5
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences