Unrated severityNVD Advisory· Published Feb 23, 2020· Updated Aug 4, 2024
CVE-2020-9354
CVE-2020-9354
Description
An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) saveFile provided by the console functionality on the /tools/developerConsoleOperations.jsp (or /isomorphic/IDACall) URL allows an unauthenticated attacker to overwrite files via vectors involving an XML comment and /.. path traversal.
Affected products
2- SmartClient/SmartClientdescription
- Range: =12.0
Patches
Vulnerability mechanics
References
1- seclists.org/fulldisclosure/2020/Feb/18mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.