Medium severity5.3NVD Advisory· Published Nov 30, 2023· Updated Jun 17, 2026
CVE-2023-6352
CVE-2023-6352
Description
The default configuration of Aquaforest TIFF Server allows access to arbitrary file paths, subject to any restrictions imposed by Internet Information Services (IIS) or Microsoft Windows. Depending on how a web application uses and configures TIFF Server, a remote attacker may be able to enumerate files or directories, traverse directories, bypass authentication, or access restricted files.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
5- github.com/qwell/disorder-in-the-court/blob/main/README-TylerTechnologies.mdnvdExploitThird Party Advisory
- www.aquaforest.com/blog/aquaforest-tiff-server-sunsettingnvdVendor Advisory
- www.aquaforest.com/blog/tiff-server-security-updatenvdVendor Advisory
- www.cisa.gov/news-events/alerts/2023/11/30/multiple-vulnerabilities-affecting-web-based-court-case-and-document-management-systemsnvdThird Party AdvisoryUS Government Resource
- www.aquaforest.com/wp-content/uploads/pdf/ts/TiffServer4.2.pdfnvdProduct
News mentions
0No linked articles in our index yet.