Path traversal

Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary files via a \\ four backslashes in the fileName parameter to getRdsLogFile...

CVE-2014-9436

Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary files via a \\ four backslashes in the fileName parameter to getRdsLogFile...

PT-2015-4199

Name of the Vulnerable Software and Affected Versions SysAid On-Premise versions prior to 14.4.2 Description The issue allows remote attackers to read arbitrary files. This is achieved by using a four backslashes in the fileName parameter to the getRdsLogFile endpoint. Recommendations For version...

CVE-2014-9436: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary files via a \\ four backslashes in the fileName parameter to getRdsLogFile...