JVN#44392991: Security File Manager vulnerable to directory traversal

Security File Manager provided by CGENE Inc contains an issue in processing file names, which may result in a directory traversal (CWE-22) vulnerability.

Impact

A remote, unauthenticated attacker may create an arbitrary file or overwrite an existing file in a directory that the application has privileges to access.

Solution

Apply an update
Update to the latest version according to the information provided by the developer.

Products Affected

• Security File Manager [Trial Version] version 1.0.6 and earlier
• Security File Manager Pro version 1.0.6 and earlier