high7.5
CVE-2022-39040
aEnrich a+HRD log read function has a path traversal vulnerability.
Impact
aEnrich a+HRD log read function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aenrich | A\+Hrd | Versions 6.8, 7.0 |