JVN#21968837: ManageEngine Firewall Analyzer vulnerable to directory traversal

ManageEngine Firewall Analyzer provided by Zoho Corporation is a log analytics and configuration management software for network security devices. ManageEngine Firewall Analyzer contains a directory traversal vulnerability.

Impact

An authenticated attacker may be able to obtain arbitrary files on the server.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

• ManageEngine Firewall Analyzer versions prior to 8.0