CVE-2014-2367

Publication date

2014-07-19 01:00:00

Family

icscert

State

PUBLISHED

Description

The ChkCookie subroutine in an ActiveX control in broadweb/include/gChkCook.asp in Advantech WebAccess before 7.2 allows remote attackers to read arbitrary files via a crafted call.