Description
ArcGIS GeoEvent Server versions 10.8.1 and below has a read-only directory path traversal vulnerability that could allow an unauthenticated, remote attacker to perform directory traversal attacks and read arbitrary files on the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Esri | ArcGIS GeoEvent Server | All – ≤ 10.8.1 | — |