CVE-2020-24624 – Unathenticated directory traversal in the DownloadServlet class execute()

4 years ago

Unathenticated directory traversal in the DownloadServlet class execute() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24624

Reference (s):

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04037en_us
URL: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04037en_us