Security Advisory

CVE-2021-26294

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-03-07 03:42:34

Last updated 2024-08-03 20:19:20

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal to read files (such as a data/settings/settings.xml file containing admin panel credentials), as demonstrated by dav/server.php/files/personal/%2e%2e when using the caldav_public_user account (with caldav_public_user as its password).

← Browse all CVEs View on cve.org ↗