CVE-2014-2976

CVE-2014-2976 affects Sixnet SixView Manager 2.4.1 (Sixview web console). A directory traversal flaw allows remote attackers to read arbitrary files via a crafted HTTP GET (port 18081) that uses a .. sequence. The root cause is insufficient input sanitization in the web console, enabling access t...