Lucene search

K
cvelistMitreCVELIST:CVE-2020-14946
HistoryJun 22, 2020 - 9:43 p.m.

CVE-2020-14946

2020-06-2221:43:00
mitre
www.cve.org
1

AI Score

4.3

Confidence

High

EPSS

0.009

Percentile

82.4%

downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and earlier allows users to download transaction files. When downloading the files, a user is able to view local files on the web server by manipulating the FileName and FilePath parameters in the URL, or while using a proxy. This vulnerability could be used to view local sensitive files or configuration files.

AI Score

4.3

Confidence

High

EPSS

0.009

Percentile

82.4%