A path traversal vulnerability in Dassault Systèmes DELMIA Factory Resource Manager allows authenticated attackers to perform unauthorized file operations, posing a significant risk to data integrity and confidentiality.

The vulnerability is a path traversal flaw (CWE-22) residing in the Factory Resource Management component, which fails to properly sanitize user input. According to the CVSS vector (PR:L), this requires an authenticated user with low privileges to trigger the flaw.

Successful exploitation allows an attacker to read sensitive configuration files or overwrite critical system files on the server. Given the CVSS score of 7.1, this vulnerability is classified as High severity, as it facilitates unauthorized access to potentially sensitive data and could lead to system instability or further compromise of the host environment.

Immediate Action: Review the official security advisory at the Dassault Systèmes Trust Center and apply the latest available patches or functional packs for your specific release.

Proactive Monitoring: Monitor server access logs for unusual path patterns, such as sequences containing directory traversal characters like dot-dot-slash, directed at the Factory Resource Management component.

Compensating Controls: Implement strict file system permissions for the service account running the application to limit the scope of potential file read or write operations. A Web Application Firewall may also be configured to block suspicious requests containing path traversal sequences.

Public Exploit Available: No (exploit_available unknown).

Organizations utilizing the affected versions of DELMIA Factory Resource Manager should prioritize this update to prevent potential unauthorized file system access. Administrators must verify their current release version against the provided list and coordinate with the vendor to ensure the integrity of the application environment.