CVE-2017-9024

CVE-2017-9024 describes a directory traversal vulnerability in Secure Bytes’ Secure Auditor / Cisco Configuration Manager bundled with Secure Auditor (SCA) 3.0. The issue resides in the TFTP Server and allows an attacker to read arbitrary files by using ../ sequences in a pathname. This vulnerabi...