high7.8
CVE-2014-5359
Directory traversal vulnerability in SafeNet Authentication Service (SAS) Outlook Web Access Agent (formerly CRYPTOCard) before 1.03.30109 allows remote attack…
Impact
Directory traversal vulnerability in SafeNet Authentication Service (SAS) Outlook Web Access Agent (formerly CRYPTOCard) before 1.03.30109 allows remote attackers to read arbitrary files via a .. (dot dot) in the GetFile parameter to owa/owa.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Safenet-Inc | Safenet Authentication Service Outlook Web Access Agent | through 1.03.20212 |
Weakness classification
References
- NVD record
- CVE.org record
- http://appcheck-ng.com/safenet-sas-owa-agent-directory-traversal-vulnerability/
- http://www.safenet-inc.com/technical-support/security-updates/
- http://appcheck-ng.com/safenet-sas-owa-agent-directory-traversal-vulnerability/
- http://www.safenet-inc.com/technical-support/security-updates/