CVE-2020-14946

downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and earlier allows users to download…

published June 22, 2020

CVSS
—
EPSS
8%
Percentile
94.6
In the wild
Unconfirmed
What it is

downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and earlier allows users to download transaction files. When downloading the files, a user is able to view local files on the web server by manipulating the FileName and FilePath parameters in the URL, or while using a proxy. This vulnerability could be used to view local sensitive files or configuration files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07700 · 94.6th percentile
Published
2020-06-22T21:43Z
EPSS history
Timeline
  • 22 JUN 21:43Z
    downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and earlier allows users to download…
    cvelistv5