7.2
Élevée
CVE-2024-38878 A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 R8.2 SP3…
Description
A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 R8.2 SP3 (All versions), Omnivise T3000 R8.2 SP4 (All versions). Affected devices allow authenticated users to export diagnostics data. The corresponding API endpoint is susceptible to path traversal and could allow an authenticated attacker to download arbitrary files from the file system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Omnivise T3000 Application Server R9.2 | Versions non publiées | |
| Omnivise T3000 R8.2 SP3 | Versions non publiées | |
| Omnivise T3000 R8.2 SP4 | Versions non publiées |
Autres CVE de Omnivise T3000 Application Server R9.2
Les 4 CVE de Omnivise T3000 Application Server R9.2 →
CVE-2024-38879
A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 R8.2 SP3…
7.5
Élevée
CVE-2024-38877
A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 Domain…
8.2
Élevée
CVE-2024-38876
A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 Domain…
7.8
Élevée