The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a restricted directory inside a specific route. If an attacker supplied path traversal charters (../) as part of a filename, the server will save the file where the attacker chooses. This could allow an attacker to write any data to any file in the server.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: icscert
Published: 2022-05-17T20:15:55.669033Z
Updated: 2024-09-17T01:16:29.709Z
Reserved: 2022-04-14T00:00:00
Link: CVE-2022-1359
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-05-17T21:15:08.040
Modified: 2024-11-21T06:40:34.137
Link: CVE-2022-1359
Redhat
No data.