Description
HCL AppScan Traffic Recorder fails to adequately neutralize special characters within the filename, potentially allowing it to resolve to a location beyond the restricted directory. Potential exploits can completely disrupt or takeover the application or the computer where the application is running.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | HCL AppScan Traffic Recorder | <= 1.0.6 | — |
Advisories 1
- WID-SEC-2025-0564 HCL AppScan Enterprise: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Mar 13, 2025