PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote information disclosure.
References
Link | Resource |
---|---|
https://gist.github.com/leommxj/0a32afeeaac960682c5b7c9ca8ed070d | Exploit Third Party Advisory |
https://pacsone.net/download.htm | Product Vendor Advisory |
Configurations
History
No history.
Information
Published : 2021-02-03 13:15
Updated : 2024-02-28 18:08
NVD link : CVE-2020-29166
Mitre link : CVE-2020-29166
CVE.ORG link : CVE-2020-29166
JSON object : View
Products Affected
rainbowfishsoftware
- pacsone_server
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')