CVE-2017-5168

CVE-2017-5168 affects Hanwha Techwin Smart Security Manager (SSM) versions 1.5 and prior (also 1.4 and prior to 1.31). The issue is multiple path traversal flaws in the ActiveMQ Broker service bundled with SSM, where crafted HTTP requests from a malicious page can lead to arbitrary file access on...