CVE-2014-2588

Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the reportFileName parameter.

Date published : 2014-03-23

http://www.securityfocus.com/bid/66302

http://www.exploit-db.com/exploits/32368