2015-01-02 19:00:00
mitre
PUBLISHED
Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary files via a (four backslashes) in the fileName parameter to getRdsLogFile.