NetSight
high7.5

CVE-2020-25842

The encryption function of NHIServiSignAdapter fail to verify the file path input by users.

Impact

The encryption function of NHIServiSignAdapter fail to verify the file path input by users. Remote attacker can access arbitrary files through the flaw without privilege.

Affected products

VendorProductAffected versions
PanoramaNhiservisignadapter
Version 1.0.20.0218

Weakness classification

References