CVE-2018-14928

/contingency/servlet/ServletFileDownload executes as root and provides unauthenticated access to files via the file parameter...

CVE-2018-14927

Matera Banco 1.0.0 is vulnerable to path traversal allowing access to system files outside the default application folder via the /contingency/servlet/ServletFileDownload file parameter, related to /contingency/web/receiptQuery/receiptDisplay.jsp...

CVE-2018-14928

/contingency/servlet/ServletFileDownload executes as root and provides unauthenticated access to files via the file parameter...

Path traversal

Matera Banco 1.0.0 is vulnerable to path traversal allowing access to system files outside the default application folder via the /contingency/servlet/ServletFileDownload file parameter, related to /contingency/web/receiptQuery/receiptDisplay.jsp...

CVE-2018-14927

Matera Banco 1.0.0 is vulnerable to path traversal allowing access to system files outside the default application folder via the /contingency/servlet/ServletFileDownload file parameter, related to /contingency/web/receiptQuery/receiptDisplay.jsp...

CVE-2018-14928

CVE-2018-14928 describes a vulnerability where /contingency/servlet/ServletFileDownload executes with root privileges and exposes unauthenticated access to files via the file parameter. This enables file disclosure without authentication. The NVD entry assigns a CVSSv3 base score of 7.5 (HIGH) wi...

CVE-2018-14928: Exposure of Sensitive Information to an Unauthorized Actor

/contingency/servlet/ServletFileDownload executes as root and provides unauthenticated access to files via the file parameter...

PT-2018-12805

Name of the Vulnerable Software and Affected Versions Matera Banco version 1.0.0 Description The issue allows for path traversal, enabling access to system files outside the default application folder. This is achieved via the "file" parameter in the /contingency/servlet/ServletFileDownload...

CVE-2018-14927: Improper Limitation of a Pathname to a Restricted Directory

Matera Banco 1.0.0 is vulnerable to path traversal allowing access to system files outside the default application folder via the /contingency/servlet/ServletFileDownload file parameter, related to /contingency/web/receiptQuery/receiptDisplay.jsp...

PT-2018-12806

Name of the Vulnerable Software and Affected Versions No specific software or version is mentioned. Description The issue allows unauthenticated access to files via the file parameter in the '/contingency/servlet/ServletFileDownload' endpoint, which executes as root. Recommendations At the moment...