IBM Optim Test Data Management versions 1.0.0, 1.1.0, and 1.2.0 contain a path traversal flaw that can be exploited by a remote authenticated attacker to read files outside the intended directory, potentially exposing sensitive data. The flaw is assigned a CVSS score of 9.1, indicating a high severity vulnerability that can compromise confidentiality and integrity.

The affected systems are IBM Optim Test Data Management, specifically the 1.0.0, 1.1.0, and 1.2.0 releases.

The vulnerability requires the attacker to be authenticated, but once logged in the attacker can supply crafted file path inputs to access arbitrary files. Given the high CVSS score and lack of an existing exploit in the tractable marketplace, the risk remains high. The vulnerability is not listed in the CISA KEV catalog and EPSS data is unavailable; however the impact level dictates that timely remediation is essential. The attack vector is inferred to be a web-based input where file path can be manipulated, based on the path traversal description.