high7.5
CVE-2019-9632
ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishan…
Impact
ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Esafenet | Electronic Document Security Management System | Versions v3, v5 |