CVE-2022-46309 — Galaxy Software Services Corporation. Vitals ESP - Arbitrary Path File Reading

CVE-2022-46309

Galaxy Software Services Corporation. Vitals ESP - Arbitrary Path File Reading PUBLISHED

Description (CNA)

Vitals ESP upload function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to access arbitrary system files.

Affected (CNA)

Vendor / product	Versions
Galaxy Software Services Corporation. / Vitals ESP	affected 3.0.8 through 6.2.0

CWE

CWE-22

References

https://www.twcert.org.tw/tw/cp-132-6785-86407-1.html

ADP enrichment

CVE

No English description supplied.

https://www.twcert.org.tw/tw/cp-132-6785-86407-1.html

CISA-ADP

No English description supplied.

No references supplied.