A Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make HTTP GET requests to a certain URL and obtain information about what files and directories reside on the server.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11596
Reference (s):
- https://www.criticalstart.com/vulnerabilities-discovered-in-cipace-enterprise-platform/