Synerion TimeNet version 9.21 contains a directory traversal vulnerability where, on the "Name" parameter, the attacker can return to the root directory and open the host file. This might give the attacker the ability to view restricted files, which could provide the attacker with more information required to further compromise the system.
References
| Link | Resource |
|---|---|
| https://www.gov.il/en/departments/faq/cve_advisories | Third Party Advisory |
Advertisement
Configurations
Information
Published : 2021-09-07 05:15
Updated : 2021-12-16 12:34
NVD link : CVE-2021-36717
Mitre link : CVE-2021-36717
JSON object : View
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Advertisement
Products Affected
synerion
- timenet