PT-2019-12745

Name of the Vulnerable Software and Affected Versions ExaGrid appliances version v4.8.1.1044.P50 Description The issue allows remote attackers to view and retrieve verbose logging information due to a directory traversal vulnerability in the /monitor/data/Upgrade/ directory. This vulnerability ca...

CVE-2019-12310: Improper Limitation of a Pathname to a Restricted Directory

ExaGrid appliances with firmware version v4.8.1.1044.P50 have a /monitor/data/Upgrade/ directory traversal vulnerability, which allows remote attackers to view and retrieve verbose logging information. Files within this directory were observed to contain sensitive run-time information, including...