PT-2018-3858 · Axxonsoft · Axxon Next
CVE-2018-7467
·
Publicado
2018-02-27
·
Atualizado
2024-02-14
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
AxxonSoft Axxon Next (affected versions not specified)
Description
The issue is related to incorrect restriction of directory path names with limited access. Exploitation of this issue may allow a remote attacker to disclose protected information. The problem can be triggered via a URI with an initial
/css//..%2f substring, which is related to a directory traversal vulnerability.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Axxon Next