Security Advisory

CVE-2009-4511

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2010-04-13 17:00:00
Last updated 2024-08-07 07:08:36
Assigner mitre
State PUBLISHED

Description

Multiple directory traversal vulnerabilities in the web administration interface on the TANDBERG Video Communication Server (VCS) before X5.1 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the page parameter to (1) helppage.php or (2) user/helppage.php.