CVE-2015-2860: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Avigilon Control Center ACC 4 before 4.12.0.54 and 5 before 5.4.2.22 allows remote attackers to read arbitrary files via a crafted help/ URL...