CVE-2020-10579

Name of the Vulnerable Software and Affected Versions Invigo Automatic Device Management (ADM) versions through 5.0

Description A directory traversal issue in the /admin/sysmon.php script allows remote attackers to list the content of arbitrary server directories accessible to the user running the application.

Recommendations For Invigo Automatic Device Management (ADM) versions through 5.0, consider restricting access to the /admin/sysmon.php script until a patch is available. As a temporary workaround, limit the privileges of the user running the application to minimize the risk of exploitation.