CVE-2020-24626 – Unathenticated directory traversal in the ReceiverServlet class doPost()

Unathenticated directory traversal in the ReceiverServlet class doPost() method can lead to arbitrary remote code execution in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24626

Reference (s):

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04037en_us
• URL: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04037en_us