CVE-2020-17389

Marvell QConvergeConsole 5.5.0.64 is affected by CVE-2020-17389. The flaw resides in decryptFile of GWTTestServiceImpl and stems from insufficient validation of a user-supplied path used in file operations, enabling a directory traversal that can let an attacker execute code in the SYSTEM context...