CVE-2024-58396

The YouDataSum CPAS Audit Management System V4 is susceptible to a path traversal vulnerability (CWE-22). This flaw allows unauthenticated attackers to read arbitrary system files, such as /etc/passwd, by manipulating the fileId parameter in GET requests directed at the /cpasm4/plugInManControlle...

CPAS Management System - Arbitrary File Read Detection

The CPAS Audit Management System has been found to contain a vulnerability that allows arbitrary file read. This security flaw can be exploited by attackers to access sensitive files on the server, potentially exposing critical system information. The vulnerability can be triggered by sending a...