CVE-2019-12310

Published: 2019-06-03T19:29Z

Last Modified: 2024-11-21T04:22Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

ExaGrid appliances with firmware version v4.8.1.1044.P50 have a /monitor/data/Upgrade/ directory traversal vulnerability, which allows remote attackers to view and retrieve verbose logging information. Files within this directory were observed to contain sensitive run-time information, including Base64 encoded 'support' credentials, leading to administrative access of the device. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt