CVE-2020-11491

Name of the Vulnerable Software and Affected Versions Zen Load Balancer version 3.10.1

Description The issue allows remote authenticated administrators to conduct absolute path traversal attacks. This can be demonstrated by sending a request to the "index.cgi" endpoint with a filelog parameter set to /etc/shadow, allowing access to sensitive files.

Recommendations For Zen Load Balancer version 3.10.1, consider restricting access to the index.cgi endpoint or limiting the filelog parameter to prevent path traversal attacks until a patch is available.