VYPR
← All advisories
High severity7.5NVD Advisory· Published Mar 8, 2019· Updated Jun 17, 2026

CVE-2019-9632

CVE-2019-9632

Description

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request.

Affected products

3
  • Esafenet/Electronic Document Security Management System2 versions
    cpe:2.3:a:esafenet:electronic_document_security_management_system:v3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:esafenet:electronic_document_security_management_system:v3:*:*:*:*:*:*:*
    • cpe:2.3:a:esafenet:electronic_document_security_management_system:v5:*:*:*:*:*:*:*
  • Esafenet/CDGllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.