Security Advisory

CVE-2014-9436

5

Vulnerability Description

Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary files via a \\\\ (four backslashes) in the fileName parameter to getRdsLogFile.
Published Date January 2, 2015
Official Source NIST NVD Advisory