Skip to content
OpenAdvisories
Medium · 6.6 CVE-2020-12146 EUVD-2020-4461GHSA-vxrq-49g3-9pjf

Silver Peak Unity OrchestratorTM subject to path traversal.

Published Nov 5, 2020 · Updated Sep 17, 2024 · Assigned by Silver Peak

Description

In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restricted files on the Orchestrator server using the/debugFiles REST API.

Affected products

VendorProductAffectedFixed
Silver Peak Systems Unity Orchestrator All versions affected prior to Silver Peak Unity Orchestrator 8.9.11+, 8.10.11+, or 9.0.1+. —

References