Harbinger Offline Player 路径遍历漏洞

Harbinger Offline Player is Harbinger's seamless and highly secure way to access training content without the need for a constant Internet connection. A security vulnerability exists in Harbinger Offline Player version 4.0.6.0.2, which stems from OfflinePlayerService.exe allowing directory...

PT-2023-24859 · Unknown · Harbinger Offline Player

Name of the Vulnerable Software and Affected Versions: Harbinger Offline Player version 4.0.6.0.2 Description: The issue allows directory traversal as LocalSystem via .. in a URL. This can be exploited in OfflinePlayerService.exe. Recommendations: For Harbinger Offline Player version 4.0.6.0.2,...