CVE-2019-8925

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2

published May 17, 2019

CVSS
—
EPSS
12%
Percentile
96.0
In the wild
Unconfirmed
What it is

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. An Absolute Path Traversal vulnerability in the Administration zone, in /netflow/servlet/CReportPDFServlet (via the parameter schFilePath), allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via any file name, such as a schFilePath=C:\boot.ini value.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.11606 · 96.0th percentile
Published
2019-05-17T01:15Z
EPSS history
Timeline
  • 17 MAY 01:15Z
    An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2
    cvelistv5