CVE-2014-2588: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated users to read arbitrary files via a .. dot dot in the reportFileName parameter...