CVE-2020-24625 – Unathenticated directory traversal in the ReceiverServlet class doGet() m

Unathenticated directory traversal in the ReceiverServlet class doGet() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24625

Reference (s):

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04037en_us
• URL: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04037en_us