Non notée

CVE-2020-24624 Unathenticated directory traversal in the DownloadServlet class execute() method can lead to arbitrary file reads in HPE…

Description

Unathenticated directory traversal in the DownloadServlet class execute() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter	1.9	Pas de correctif indiqué

Les 3 CVE de HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter →

CVE-2020-24626 Unathenticated directory traversal in the ReceiverServlet class doPost() method can lead to arbitrary remote code… Non notée CVE-2020-24625 Unathenticated directory traversal in the ReceiverServlet class doGet() method can lead to arbitrary file reads in HPE… Non notée

Vous utilisez HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter ?

Suivre cette CVE Surveiller HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2020-24624

Chronologie

Publiée 23 septembre 2020
Dernière modification 4 août 2024

Références

support.hpe.com support.hpe.com

Suivre cette CVE

CVE-2020-24624 Unathenticated directory traversal in the DownloadServlet class execute() method can lead to arbitrary file reads in HPE…

Description

Produits et versions touchés

Autres CVE de HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter