CVE-2018-14928: Exposure of Sensitive Information to an Unauthorized Actor

/contingency/servlet/ServletFileDownload executes as root and provides unauthenticated access to files via the file parameter...

PT-2018-12806

Name of the Vulnerable Software and Affected Versions No specific software or version is mentioned. Description The issue allows unauthenticated access to files via the file parameter in the '/contingency/servlet/ServletFileDownload' endpoint, which executes as root. Recommendations At the moment...