CVE-2020-24625 – Unathenticated directory traversal in the ReceiverServlet class doGet() m

4 years ago

Unathenticated directory traversal in the ReceiverServlet class doGet() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24625

Reference (s):

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04037en_us
URL: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04037en_us