medium4.9
CVE-2021-41551
Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link.
Impact
Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Leostream | Connection Broker | Version 9.0.40.17 |
Weakness classification
References
- NVD record
- CVE.org record
- https://leostream.com/wp-content/uploads/2018/11/Leostream_release_notes.pdf
- https://www.leostream.com/resource/leostream-connection-broker-9-0/
- https://leostream.com/wp-content/uploads/2018/11/Leostream_release_notes.pdf
- https://www.leostream.com/resource/leostream-connection-broker-9-0/