medium5.0
CVE-2000-1048
Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a ..
Impact
Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack via an HTTP GET request that uses encoded characters in the URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qbik | Wingate | Versions 2.1, 3.0, 4.0.1, 4.1_beta_a |