Skip to content
Sign in
Not rated

CVE-2020-24624 Unathenticated directory traversal in the DownloadServlet class execute() method can lead to arbitrary file reads in HPE…

Description

Unathenticated directory traversal in the DownloadServlet class execute() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.

Affected products and versions

Product Affected versions Fixed in
HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter 1.9 No fix stated

Other CVEs of HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter

The 3 CVEs of HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter →
CVE-2020-24626 Unathenticated directory traversal in the ReceiverServlet class doPost() method can lead to arbitrary remote code… Not rated CVE-2020-24625 Unathenticated directory traversal in the ReceiverServlet class doGet() method can lead to arbitrary file reads in HPE… Not rated
Track this CVE