Security Advisory
CVE-2019-25355
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
gSOAP 2.8 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipulating HTTP path traversal techniques. Attackers can retrieve sensitive files like /etc/passwd by sending crafted GET requests with multiple ../ directory traversal sequences.