CVE-2023-3701 — Relative path traversal in Aqua eSolutions

Description (CNA)

Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files of the cloud disk platform, affecting the integrity and availability of the entire platform.

Affected (CNA)

Vendor / product	Versions
Aqua eSolutions / Aqua Drive	affected 2.4

CWE

CWE-23

References

https://www.incibe.es/en/incibe-cert/notices/aviso/relative-path-traversal-aqua-esolutions

ADP enrichment

CVE

No English description supplied.

https://www.incibe.es/en/incibe-cert/notices/aviso/relative-path-traversal-aqua-esolutions

CISA-ADP

No English description supplied.

No references supplied.