Beveiligingsadvies

CVE-2019-11029

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-08-22 14:49:45

Laatst bijgewerkt 2024-08-04 22:40:15

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Download() method of AutoUpdateService in SMServer.exe, leading to Directory Traversal. An attacker could use ..\ with this method to iterate over lists of interesting system files and download them without previous authentication. This includes SAM-database backups, Web.config files, etc. and might cause a serious impact on confidentiality.

← Alle CVE's bekijken Bekijk op cve.org ↗