PT-2019-14241
CVE-2019-15519
·
Published
2019-08-23
·
Updated
2019-08-30
Description by
CVSS 2.0
10
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Power-Response versions prior to 2019-02-02
Description
The issue allows directory traversal up to the application's main directory via a plugin.
Recommendations
For versions prior to 2019-02-02, update to a version released after 2019-02-02 to resolve the issue. As a temporary workaround, consider restricting access to the plugin that allows directory traversal until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾