Description (CNA)
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to delete arbitrary files or directories under a user controlled path and does not correctly check if the relative path is still within the intended target directory.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens / SINEC NMS | affected All versions < V1.0 SP2 Update 1 |
CWE
CWE-22
References
ADP enrichment
No English description supplied.