CVE-2020-7882
anySign directory traversal vulnerability
- State
- Published
- Severity
- 7.5 High
- Published
- Nov 22, 2021
- Updated
- Aug 4, 2024
- Reserved
- Jan 22, 2020
Description
Using the parameter of getPFXFolderList function, attackers can see the information of authorization certification and delete the files. It occurs because the parameter contains path traversal characters(ie. '../../../')
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | krcert |
Weaknesses
- CWE-24 Path Traversal: '../filedir'
Affected Products
| Product | Versions |
|---|---|
anySign4PCHancomwith |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.