← CVE Intelligence

CVE-2020-7831

INOGARD / Ebiz4u CViewer Object AxECM.dll PUBLISHED

Description (CNA)

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however.

Affected (CNA)

Vendor / productVersions
INOGARD / Ebiz4u CViewer Object AxECM.dllaffected CViewer Object through 1.0.5.1

CWE

CWE-494

References

ADP enrichment

CVE

No English description supplied.