Description (CNA)
The functionality for file download in HGiga OAKlouds' certain modules contains an Arbitrary File Read and Delete vulnerability. Attackers can put file path in specific request parameters, allowing them to download the file without login. Furthermore, the file will be deleted after being downloaded.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Hgiga / OAKlouds | affected earlier before 188 |
| Hgiga / OAKlouds | affected earlier before 1051 |
CWE
CWE-22
References
- https://www.twcert.org.tw/tw/cp-132-7674-bdb40-1.html
- https://www.chtsecurity.com/news/e456f679-9091-4de4-8f78-9262d20d6a96
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.