PT-2021-11633
CVE-2020-29026
·
تاريخ النشر
2021-02-15
·
تاريخ التحديث
2021-02-22
الوصف من
CVSS 3.1
9.0
حرجةالمقاييسAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
Name of the Vulnerable Software and Affected Versions:
GateManager versions prior to 9.2c
Description:
A directory traversal issue exists in the file upload function, allowing an authenticated attacker with administrative permissions to read and write arbitrary files in the Linux file system.
Recommendations:
For versions prior to 9.2c, update to version 9.2c or later to resolve the issue. As a temporary workaround, consider restricting access to the file upload function to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾