PT-2020-13383
CVE-2020-13227
·
Published
2020-06-02
·
Updated
2020-06-02
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Sysax Multi Server version 6.90
Description
An issue allows an attacker to determine the username under which the web server is running by triggering an invalid path permission error, bypassing the fakepath protection mechanism.
Recommendations
For Sysax Multi Server version 6.90, consider restricting access to sensitive paths to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾