Skip to content
OpenAdvisories
High · 7.5 CVE-2022-39040 EUVD-2022-41586GHSA-mwwv-f6qm-qmvc

aEnrich a+HRD - Path Traversal

Published Jan 3, 2023 · Updated Apr 10, 2025 · Assigned by twcert

Description

aEnrich a+HRD log read function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.

Affected products

VendorProductAffectedFixed
aEnrich a+HRD 6.8 – ≤ 7.0 —

References