CVE-2017-9447

CVE-2017-9447

In the web interface of Parallels Remote Application Server (RAS) 15.5 Build 16140, a vulnerability exists due to improper validation of the file path when requesting a resource under the "RASHTML5Gateway" directory. A remote, unauthenticated attacker could exploit this weakness to read arbitrary files from the vulnerable system using path traversal sequences.

Source: CVE-2017-9447

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다