CVEvulnerability

CVE-2024-3122

4.9 MEDIUM Published 2024-07-01 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-07-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.9 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-23

Description

CHANGING Mobile One Time Password does not properly filter parameters for the file download functionality, allowing remote attackers with administrator privilege to read arbitrary file on the system.

Related

Weakness · CWE (1)

  • CWE-23 Relative Path Traversal weakness

References