Lucene search

K
cvelistHpeCVELIST:CVE-2020-24624
HistorySep 23, 2020 - 12:41 p.m.

CVE-2020-24624

2020-09-2312:41:00
hpe
www.cve.org
4
cve-2020-24624
directory traversal
file reads
hpe
pay per use
ucs meter

EPSS

0.014

Percentile

86.8%

Unathenticated directory traversal in the DownloadServlet class execute() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.

CNA Affected

[
  {
    "product": "HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1.9"
      }
    ]
  }
]

EPSS

0.014

Percentile

86.8%

Related for CVELIST:CVE-2020-24624