CVE-2020-24626

Unathenticated directory traversal in the ReceiverServlet class doPost method can lead to arbitrary remote code execution in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...

CVE-2020-24626

The provided evidence confirms a concrete vulnerability in Hewlett Packard Enterprise Pay Per Use (PPU) Utility Computing Service Meter (UCS Meter) version 1.9, caused by a directory traversal in the ReceiverServlet.doPost method. An unauthenticated attacker can exploit this to perform arbitrary ...