Design/Logic Flaw

2022-09-0917:15:00

PRIOn knowledge base

www.prio-n.com

0.002 Low

EPSS

Percentile

55.2%

JSON

An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files via modifying the PATH parameter.

CPENameOperatorVersion
smartvista_cardgeneq3.28.0

CPE	Name	Operator	Version
	smartvista_cardgen	eq	3.28.0

References

bpcbt.com

smartvista.com

tf1t.gitbook.io/mycve/smartvista/smartvista-cardgen/list-all-files-in-arbitrary-folder-in-smartvista-cardgen-version-3.28.0-cve-2022-38614

0.002 Low

EPSS

Percentile

55.2%

JSON

Related for PRION:CVE-2022-38614