NuytsTech Security

CVE-2016-6601

by ·

Directory traversal vulnerability in the file download functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to read arbitrary files via a .. (dot dot) in the fileName parameter to servlets/FetchFile.

Date published : 2017-01-23

http://www.securityfocus.com/bid/92402

http://www.securityfocus.com/archive/1/539159/100/0/threaded

Tags: