PT-2022-24378 · Safe · Fme Server
CVE-2022-38340
·
Published
2022-09-20
·
Updated
2022-11-03
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Safe Software FME Server versions prior to v2022.0.1.1
Description
The issue is related to a Path Traversal vulnerability via the
fmedataupload component. This vulnerability allows unauthorized access to sensitive files and directories.Recommendations
For versions prior to v2022.0.1.1, as a temporary workaround, consider restricting access to the
fmedataupload component until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Fme Server