Rockwell Automation ThinManager ThinServer Input Validation Error Vulnerability

Rockwell Automation ThinManager is a thin client management software from Rockwell Automation, Inc. It allows thin clients to be assigned to multiple remote desktop servers at the same time. An input validation error vulnerability exists in Rockwell Automation ThinManager ThinServer, which can be exploited by an attacker to send a specially crafted request containing a “dot dot” sequence (/… /…) can be exploited to send a specially crafted request containing a “dot dot” sequence (/…) to delete an arbitrary file with system privileges.