PT-2021-9159

CVE-2020-10584

·

Published

2021-03-25

·

Updated

2021-03-26

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Invigo Automatic Device Management (ADM) versions prior to 5.0
Description The issue concerns a directory traversal attack on the /admin/search by.php script, allowing remote attackers to read arbitrary server files accessible to the user running the application.
Recommendations For Invigo Automatic Device Management (ADM) versions prior to 5.0, update to version 5.0 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2020-10584
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com