← CVE Intelligence

CVE-2020-7377

Rapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump module PUBLISHED

Description (CNA)

The Metasploit Framework module "auxiliary/admin/http/telpho10_credential_dump" module is affected by a relative path traversal vulnerability in the untar method which can be exploited to write arbitrary files to arbitrary locations on the host file system when the module is run on a malicious HTTP server.

Affected (CNA)

Vendor / productVersions
Rapid7 / Metasploit Frameworkaffected 4.12.40 before 4.12.40*; affected 6.0.3 before 6.0.3

CWE

CWE-23

References

ADP enrichment

CVE

No English description supplied.