CVE-2020-24624

2020-09-23T13:15:00
ID CVE-2020-24624
Type cve
Reporter security-alert@hpe.com
Modified 2020-09-29T18:07:00

Description

Unathenticated directory traversal in the DownloadServlet class execute() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.