CVE-2016-1605

NetIQ Sentinel Server (7.4.x before 7.4.2) is affected by a directory traversal in the ReportViewServlet that allows reading arbitrary files via the PREVIEW value of the fileType field. The vulnerability arises from insufficient validation of the fileName parameter and can lead to arbitrary file ...