Security Advisory

CVE-2020-25842

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-12-31 07:45:45
Last updated 2024-09-16 19:25:28
Assigner twcert
CVSS score 7.5
State PUBLISHED

Description

The encryption function of NHIServiSignAdapter fail to verify the file path input by users. Remote attacker can access arbitrary files through the flaw without privilege.