Description (CNA)
In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment. This can cause FileCopyService to write attacker-controlled content to filesystem locations writable by the service account. This can result in remote code execution when an executable IIS-served directory is writable.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Progress / ShareFile Storage Zones Controller | affected 0 through 5.12.6 |
CWE
CWE-73, CWE-22
References
- https://docs.sharefile.com/en-us/sharefile/storage-zones-controller/5-0/security-vulnerability-sep26
ADP enrichment
No English description supplied.
No references supplied.