high7.5
CVE-2020-9050
Path Traversal vulnerability exists in Metasys Reporting Engine (MRE) Web Services which could allow a remote unauthenticated attacker to access and download a…
Impact
Path Traversal vulnerability exists in Metasys Reporting Engine (MRE) Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Johnsoncontrols | Metasys Reporting Engine | Versions 2.0, 2.1 |