Lucene search
This script is Copyright (C) 2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500390.NASLHistoryAug 10, 2021 - 12:00 a.m.
Johnsoncontrols Metasys Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
2021-08-1000:00:00
This script is Copyright (C) 2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
6
0.003 Low
EPSS
Percentile
70.3%
Path Traversal vulnerability exists in Metasys Reporting Engine (MRE) Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system.
File data ot_500390.nasl| Vendor | Product | Version | CPE |
|---|---|---|---|
| johnsoncontrols | metasys_reporting_engine | 2.0 | cpe:2.3:a:johnsoncontrols:metasys_reporting_engine:2.0:*:*:*:*:*:*:* |
| johnsoncontrols | metasys_reporting_engine | 2.1 | cpe:2.3:a:johnsoncontrols:metasys_reporting_engine:2.1:*:*:*:*:*:*:* |
Related
cvelist
cvelist
ics
ics
Johnson Controls Metasys Reporting Engine (MRE) Web Services
2021-02-23 12:00:00
cve
cve
CVE-2020-9050
2021-02-19 18:15:11
prion
prion
Path traversal
2021-02-19 18:15:00
nvd
nvd
CVE-2020-9050
2021-02-19 18:15:11