Unathenticated directory traversal in the DownloadServlet class execute() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.
[
{
"product": "HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "1.9"
}
]
}
]