Описание
NCSIST ManageEngine Mobile Device Manager(MDM) APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:wisdomgarden:tronclass_ilearn:1.62.41849:hotfix-v1-62-84ccf1a5:*:*:*:*:*:*
EPSS
Процентиль: 24%
0.00082
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-22
CWE-639
Связанные уязвимости
CVSS3: 6.5
github
больше 2 лет назад
NCSIST ManageEngine Mobile Device Manager(MDM) APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files.
EPSS
Процентиль: 24%
0.00082
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-22
CWE-639