CVE-2020-5804
N/A
N/A
Summary
Marvell QConvergeConsole GUI <= 5.5.0.74 is affected by a path traversal vulnerability. The deleteEventLogFile method of the GWTTestServiceImpl class lacks proper validation of a user-supplied path prior to using it in file deletion operations. An authenticated, remote attacker can leverage this vulnerability to delete arbitrary remote files as SYSTEM or root.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | Marvell QConvergeConsole GUI | 5.5.0.74 | affected |
Weaknesses
- Path Traversal
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.