medium6.5
CVE-2024-31947
StoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows Directory Traversal by authenticated users.
Impact
StoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows Directory Traversal by authenticated users. Using a crafted path parameter with the Online Help facility can expose sensitive system information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Stonefly | Storage Concentrator | before 8.0.4.26 |