CVE-2014-8742

Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2014-8742

Lexmark MarkVision Enterprise prior to 2.1 is affected by CVE-2014-8742, a directory traversal vulnerability in the ReportDownloadServlet that allows remote attackers to read arbitrary files. The root cause is improper handling/sanitization of input leading to unauthorized file disclosure. Some s...

CVE-2014-8742

Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2014-8742: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to read arbitrary files via unspecified vectors...

Lexmark MarkVision Enterprise ReportDownloadServlet Information Disclosure

Nessus was able to exploit an information disclosure vulnerability in Lexmark MarkVision Enterprise due to improper handling of user input to the 'ReportDownloadServlet' servlet. A remote, unauthenticated attacker can exploit this issue to read arbitrary files C Tenable Network Security, Inc...

Lexmark MarkVision Enterprise ReportDownloadServlet Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Lexmark MarkVision Enterprise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ReportDownloadServlet class. The class contains a method that does n...