Security Advisory

CVE-2019-12310

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-06-03 18:59:47
Last updated 2024-08-04 23:17:39
Assigner mitre
State PUBLISHED

Description

ExaGrid appliances with firmware version v4.8.1.1044.P50 have a /monitor/data/Upgrade/ directory traversal vulnerability, which allows remote attackers to view and retrieve verbose logging information. Files within this directory were observed to contain sensitive run-time information, including Base64 encoded support credentials, leading to administrative access of the device.