NetSight
IP …
critical9.1

CVE-2020-11431

The documentation component in i-net Clear Reports 16.0 to 19.2, HelpDesk 8.0 to 8.3, and PDFC 4.3 to 6.2 allows a remote unauthenticated attacker to read arbi…

Impact

The documentation component in i-net Clear Reports 16.0 to 19.2, HelpDesk 8.0 to 8.3, and PDFC 4.3 to 6.2 allows a remote unauthenticated attacker to read arbitrary system files and directories on the target server via Directory Traversal.

Affected products

VendorProductAffected versions
InetsoftwareClear Reports
from 16.0 through 19.2
InetsoftwareHelpdesk
from 8.0 through 8.3
InetsoftwarePdfc
from 4.3 through 6.2

Weakness classification

CWE-22

References