Design/Logic Flaw

2019-03-0807:29:00

PRIOn knowledge base

www.prio-n.com

0.054 Low

EPSS

Percentile

93.2%

JSON

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request.

CPENameOperatorVersion
electronic_document_security_management_systemeq5.0.118
electronic_document_security_management_systemeq3.0.118

CPE	Name	Operator	Version
	electronic_document_security_management_system	eq	5.0.118
	electronic_document_security_management_system	eq	3.0.118

References

www.iwantacve.cn/index.php/archives/132/

0.054 Low

EPSS

Percentile

93.2%

JSON

Related for PRION:CVE-2019-9632