PT-2020-20447
CVE-2020-9032
·
تاريخ النشر
2020-02-17
·
تاريخ التحديث
2020-02-19
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Symmetricom SyncServer S100 version 2.90.70.3
Symmetricom SyncServer S200 version 1.30
Symmetricom SyncServer S250 version 1.25
Symmetricom SyncServer S300 version 2.65.0
Symmetricom SyncServer S350 version 2.80.1
Description
The issue allows Directory Traversal via the
FileName parameter to "kernlog.php".Recommendations
For Symmetricom SyncServer S100 version 2.90.70.3, restrict access to the
FileName parameter in the "kernlog.php" endpoint.
For Symmetricom SyncServer S200 version 1.30, restrict access to the FileName parameter in the "kernlog.php" endpoint.
For Symmetricom SyncServer S250 version 1.25, restrict access to the FileName parameter in the "kernlog.php" endpoint.
For Symmetricom SyncServer S300 version 2.65.0, restrict access to the FileName parameter in the "kernlog.php" endpoint.
For Symmetricom SyncServer S350 version 2.80.1, restrict access to the FileName parameter in the "kernlog.php" endpoint. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾