3 matches found
Path traversal
Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary files via a \\ four backslashes in the fileName parameter to getRdsLogFile...
5CVSS7.1AI score0.069EPSS
SaveExploits2References4Affected Software1
CVE-2014-9436
Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary files via a \\ four backslashes in the fileName parameter to getRdsLogFile...
6.7AI score0.069EPSS
SaveExploits2References4
CVE-2014-9436: Improper Limitation of a Pathname to a Restricted Directory
Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary files via a \\ four backslashes in the fileName parameter to getRdsLogFile...
5CVSS6AI score0.069EPSS
SaveExploits2References2
20