Security Advisory

CVE-2020-25842

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-12-31 07:45:45
Last updated 2024-09-16 19:25:28
Assigner twcert
State PUBLISHED

Description

The encryption function of NHIServiSignAdapter fail to verify the file path input by users. Remote attacker can access arbitrary files through the flaw without privilege.