CVE-2019-8385

Thomson Reuters Desktop Extensions 1.9.0.358 contains an unauthenticated directory traversal and local file inclusion vulnerability (CVE-2019-8385) in ThomsonReuters.Desktop.Service.exe and ThomsonReuters.Desktop.exe. An attacker can use a \.. path to port 6677 to enumerate sensitive files on the...