Security Advisory

CVE-2021-20874

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-12-24 06:30:29
Last updated 2024-08-03 17:53:23
Assigner jpcert
State PUBLISHED

Description

Incorrect permission assignment for critical resource vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows a remote unauthenticated attacker to access arbitrary files on the server and obtain sensitive information via unspecified vectors.