CVE-2020-12251

Gigamon GigaVUE 5.5.01.11 contains a directory traversal/file-upload flaw: an authenticated user can alter the POST filename parameter to traverse directories (via ../) and obtain a full directory listing. Exploitation requires authentication; some sources note the vendor plans to sunset the prod...