An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The ASP.net SMS module can be used to read and validate the source code of ASP files. By altering the path, it can be made to read any file on the Operating System, usually with NT AUTHORITY\SYSTEM privileges.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2020-09-18T17:19:39
Updated: 2020-09-18T17:19:39
Reserved: 2020-06-11T00:00:00
Link: CVE-2020-14021
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-09-18T18:15:16.207
Modified: 2020-09-26T02:30:43.067
Link: CVE-2020-14021
JSON object: View
Redhat Information
No data.
CWE