Description (CNA)
ITPison OMICARD EDM has a path traversal vulnerability within its parameter “FileName” in a specific function. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ITPison / OMICARD EDM 's SMS | affected v6.0.1.5 |
CWE
CWE-22
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.