Design/Logic Flaw

2014-12-0216:59:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.6%

JSON

GleamTech FileVista before 6.1 allows remote authenticated users to obtain sensitive information via a crafted path when saving a zip file, which reveals the installation path in an error message.

CPENameOperatorVersion
filevistaeq6.0
filevistaeq6.0.8
filevistaeq6.0.5
filevistale6.0.9
filevistaeq6.0.7
filevistaeq6.0.6

Name	Operator	Version
filevista	eq	6.0
filevista	eq	6.0.8
filevista	eq	6.0.5
filevista	le	6.0.9
filevista	eq	6.0.7
filevista	eq	6.0.6

References

packetstormsecurity.com/files/129304/FileVista-Path-Leakage-Path-Write-Modification.html

seclists.org/fulldisclosure/2014/Nov/87

support.gleamtech.com/kb/a10/version-history-of-filevista.aspx