Description (CNA)
A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior to Security Update 6.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Micro Focus / Filr | affected 3 before 3.0 Security Update 6 |
CWE
CWE-22
References
- https://www.exploit-db.com/exploits/46450/
- https://download.novell.com/Download?buildid=nZUCSDkvpxk~
- https://support.microfocus.com/kb/doc.php?id=7023726
ADP enrichment
No English description supplied.