TEMENOS Channels Path Traversal Vulnerability

TEMENOS T24 is a banking system. A security vulnerability exists in T24 in TEMENOS Channels version R15.01. An attacker can exploit this vulnerability by traversing the file system with the help of the 'downloadDocServer' function to access files or directories outside of the restricted directori...

CVE-2019-14251: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in T24 in TEMENOS Channels R15.01. The login page presents JavaScript functions to access a document on the server once successfully authenticated. However, an attacker can leverage downloadDocServer to traverse the file system and access files or directories that are...