The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a restricted directory inside a specific route. If an attacker supplied path traversal charters (../) as part of a filename, the server will save the file where the attacker chooses. This could allow an attacker to write any data to any file in the server.
References
Link | Resource |
---|---|
https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04 | Third Party Advisory US Government Resource |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: icscert
Published: 2022-05-12T00:00:00
Updated: 2022-05-17T20:15:55
Reserved: 2022-04-14T00:00:00
Link: CVE-2022-1359
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-05-17T21:15:08.040
Modified: 2022-06-06T18:01:25.603
Link: CVE-2022-1359
JSON object: View
Redhat Information
No data.