Skip to content
Sign in
Not rated

CVE-2020-5804 Marvell QConvergeConsole GUI <= 5.5.0.74 is affected by a path traversal vulnerability

Description

Marvell QConvergeConsole GUI <= 5.5.0.74 is affected by a path traversal vulnerability. The deleteEventLogFile method of the GWTTestServiceImpl class lacks proper validation of a user-supplied path prior to using it in file deletion operations. An authenticated, remote attacker can leverage this vulnerability to delete arbitrary remote files as SYSTEM or root.

Affected products and versions

Product Affected versions Fixed in
Marvell QConvergeConsole GUI 5.5.0.74 No fix stated

Other CVEs of Marvell QConvergeConsole GUI

The 3 CVEs of Marvell QConvergeConsole GUI →
CVE-2020-5805 In Marvell QConvergeConsole GUI <= 5.5.0.74, credentials are stored in cleartext in tomcat-users.xml Not rated CVE-2020-5803 Relative Path Traversal in Marvell QConvergeConsole GUI 5.5.0.74 allows a remote, authenticated attacker to delete… Not rated
Track this CVE