CVE-2024-55457

MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially exposing sensitive information...

CVE-2024-55457

Affected product: MasterSAM Star Gate v11.Vulnerability type: Directory traversal / local file inclusion via the endpoint /adama/adama/downloadService (parameter file).Root cause: Insufficient validation of the file parameter allows reading arbitrary files on the server.Impact (as described): Pot...