Aller au contenu
Se connecter
Non notée

CVE-2020-5804 Marvell QConvergeConsole GUI <= 5.5.0.74 is affected by a path traversal vulnerability

Description

Marvell QConvergeConsole GUI <= 5.5.0.74 is affected by a path traversal vulnerability. The deleteEventLogFile method of the GWTTestServiceImpl class lacks proper validation of a user-supplied path prior to using it in file deletion operations. An authenticated, remote attacker can leverage this vulnerability to delete arbitrary remote files as SYSTEM or root.

Produits et versions touchés

Produit Versions touchées Corrigé en
Marvell QConvergeConsole GUI 5.5.0.74 Pas de correctif indiqué

Autres CVE de Marvell QConvergeConsole GUI

Les 3 CVE de Marvell QConvergeConsole GUI →
CVE-2020-5805 In Marvell QConvergeConsole GUI <= 5.5.0.74, credentials are stored in cleartext in tomcat-users.xml Non notée CVE-2020-5803 Relative Path Traversal in Marvell QConvergeConsole GUI 5.5.0.74 allows a remote, authenticated attacker to delete… Non notée
Suivre cette CVE