PT-2020-7389
CVE-2013-2474
·
تاريخ النشر
2020-01-27
·
تاريخ التحديث
2020-01-29
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
AWS XMS version 2.5
Description:
A directory traversal issue allows remote attackers to view arbitrary files by manipulating the
what parameter.Recommendations:
For AWS XMS version 2.5, avoid using the
what parameter in affected API endpoints until the issue is resolved. As a temporary workaround, consider restricting access to sensitive files to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾