CVE-2024-55457

MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially exposing sensitive information...

CVE-2024-55457: Improper Limitation of a Pathname to a Restricted Directory

MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially exposing sensitive information...

CVE-2024-55457

MasterSAM Star Gate v11 is vulnerable to a directory traversal attack (CWE-22) via the /adama/adama/downloadService endpoint. The root cause is a failure to perform path validation on the file parameter within the API responsible for downloading logs in the Troubleshooting menu. Because this API ...