Description (CNA)
There is an unrestricted file upload vulnerability where it is possible for an authenticated user (low privileged) to upload an jsp shell and execute code with the privileges of user running the web server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Tibbo / AggreGate Network Manager | affected 0 through 6.34.02 |
CWE
CWE-434
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-354-05
- https://aggregate.digital/downloads.html
ADP enrichment
No English description supplied.
No references supplied.