CVE-2020-13227

Name of the Vulnerable Software and Affected Versions Sysax Multi Server version 6.90

Description An issue allows an attacker to determine the username under which the web server is running by triggering an invalid path permission error, bypassing the fakepath protection mechanism.

Recommendations For Sysax Multi Server version 6.90, consider restricting access to sensitive paths to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.