CVE-2020-13227

CVE-2020-13227 concerns Sysax Multi Server 6.90. The vulnerability arises in the web server component where triggering an invalid path permission error bypasses the fakepath protection, allowing an attacker to determine the username under which the server is running. Affected product: Sysax Multi...

PT-2020-13383

Name of the Vulnerable Software and Affected Versions Sysax Multi Server version 6.90 Description An issue allows an attacker to determine the username under which the web server is running by triggering an invalid path permission error, bypassing the fakepath protection mechanism. Recommendation...

CVE-2020-13227: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Sysax Multi Server 6.90. An attacker can determine the username under which the web server is running by triggering an invalid path permission error. This bypasses the fakepath protection mechanism...