CVE-2020-15640

Marvell QConvergeConsole 5.5.0.64 is affected by CVE-2020-15640. The flaw is in FlashValidatorServiceImpl.getFileUploadBytes, caused by missing validation of a user-supplied path before file operations, enabling a path traversal information disclosure. Multiple sources (ZDI-20-968, RH Red Hat adv...