CVE-2020-25842

Publication date

2020-12-31 07:45:45

Family

twcert

State

PUBLISHED

Description

The encryption function of NHIServiSignAdapter fail to verify the file path input by users. Remote attacker can access arbitrary files through the flaw without privilege.