CVE-2016-5765: Improper Limitation of a Pathname to a Restricted Directory

Administrative Server in Micro Focus Host Access Management and Security Server MSS and Reflection for the Web RWeb and Reflection Security Gateway RSG and Reflection ZFE ZFE allows remote unauthenticated attackers to read arbitrary files via a specially crafted URL that allows limited directory...

PT-2016-6674

Name of the Vulnerable Software and Affected Versions Micro Focus Host Access Management and Security Server MSS versions 12.2 before 12.2.342 and 12.3 before 12.3.326 Reflection for the Web RWeb versions 12.1 before 12.1.362, 12.2 before 12.2.342, and 12.3 before 12.3.312 Reflection Security...