Fabio Carretto

The issue is related to an out-of-bounds write vulnerability in the SecuExtender SSL VPN Client software. This vulnerability could allow an authenticated local user to gain privilege escalation by sending a crafted CREATE message. The vulnerability is associated with a buffer overflow in memory, which can be exploited to elevate privileges.

The issue allows an attacker to include file contents from outside the intended directory due to a path traversal problem. The package fails to restrict access to folders outside of the intended folder in the /log/ route, which may allow attackers to include arbitrary files in the system. An attacker would need to be authenticated to perform the attack, but the package has authentication disabled by default.

The issue allows SQL Injection via the `idx` parameter in the `CWebServer::GetFloorplanImage` function in WebServer.cpp.

The issue neglects to categorize ` ` and `r` as insecure argument options, which may lead to potential security risks.