Description
A Path traversal vulnerability in the file
download functionality was identified. This vulnerability allows
unauthenticated users to download arbitrary files, in the context of the
application server, from the Linux server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SYNCPILOT | LIVE CONTRACT | 3 – < 5.4.12, 5.5 – < 5.5.4, 5.6 – < 5.6.3 | 5.4.12 |