Description (CNA)
HCL AppScan Traffic Recorder fails to adequately neutralize special characters within the filename, potentially allowing it to resolve to a location beyond the restricted directory. Potential exploits can completely disrupt or takeover the application or the computer where the application is running.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HCL Software / HCL AppScan Traffic Recorder | affected <= 1.0.6 |
CWE
CWE-22
References
- https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117697
- https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119824
ADP enrichment
No English description supplied.
No references supplied.