PT-2020-19605 · Igss · Igss
CVE-2020-7478
·
Published
2020-03-23
·
Updated
2022-10-07
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IGSS versions 14 and prior
Description
A CWE-22 issue exists, which could allow a remote unauthenticated attacker to read arbitrary files from the IGSS server PC on an unrestricted or shared network when the IGSS Update Service is enabled. This issue affects the IGSSupdate service.
Recommendations
For IGSS versions 14 and prior, disable the IGSS Update Service to prevent exploitation until a patch is available. Restrict access to the IGSS server PC on shared networks to minimize the risk of arbitrary file reading.
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Igss