Description (CNA)
NetVision Information airPASS has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| NetVision Information / airPASS | affected v2.9.0.200703; unaffected v2.9.0.231006 |
CWE
CWE-22
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.