Description
In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administrative user can exploit a path traversal vulnerability to read arbitrary files from the server filesystem, write files to arbitrary directories, or determine whether specific files exist on the server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Progress | ShareFile Storage Zones Controller | ≤ 5.12.4, 6.0.0 – ≤ 6.0.1 | — |