PT-2014-6433

Name of the Vulnerable Software and Affected Versions SafeNet Authentication Service SAS Outlook Web Access Agent formerly CRYPTOCard versions prior to 1.03.30109 Description The issue allows remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the GetFile parameter...

CVE-2014-5359: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in SafeNet Authentication Service SAS Outlook Web Access Agent formerly CRYPTOCard before 1.03.30109 allows remote attackers to read arbitrary files via a .. dot dot in the GetFile parameter to owa/owa...