JVN#88559134: SYNCK GRAPHICA Download Log CGI vulnerable to directory traversal

Download Log CGI provided by SYNCK GRAPHICA contains an issue in processing file names, which may result in a directory traversal vulnerability.

Impact

A remote attacker may obtain arbitrary files on the server.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• Download Log CGI 3.2.1 and earlier

It was found that version 3.2 released on 2015/1/7 and version 3.2.1 released on 2015/1/19 did not resolve the vulnerability, therefore, the developer released version 3.2.2 on 2015/1/23.