Lucene search
This script is Copyright (C) 2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500390.NASLHistoryAug 10, 2021 - 12:00 a.m.
Johnsoncontrols Metasys Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
2021-08-1000:00:00
This script is Copyright (C) 2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
9
johnsoncontrols
metasys
path traversal
vulnerability
file data
scanner
EPSS
0.003
Percentile
70.3%
Path Traversal vulnerability exists in Metasys Reporting Engine (MRE) Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system.
File data ot_500390.naslRelated
cvelist
cvelist
prion
prion
Path traversal
2021-02-19 18:15:00
nvd
nvd
CVE-2020-9050
2021-02-19 18:15:11
cve
cve
CVE-2020-9050
2021-02-19 18:15:11
ics
ics
Johnson Controls Metasys Reporting Engine (MRE) Web Services
2021-02-23 12:00:00