Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246.
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Link | Tags |
---|---|
https://www.bishopfox.com/blog/news-category/advisories/ | third party advisory |
https://www.solismed.com/ | product |
https://bishopfox.com | third party advisory |
https://know.bishopfox.com/advisories/solismed-critical | third party advisory exploit |