CVE-2020-17389

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2020-17389

Marvell QConvergeConsole 5.5.0.64 is affected by CVE-2020-17389. The flaw resides in decryptFile of GWTTestServiceImpl and stems from insufficient validation of a user-supplied path used in file operations, enabling a directory traversal that can let an attacker execute code in the SYSTEM context...