Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2020-12146

Silver Peak Unity OrchestratorTM subject to path traversal.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Silver Peak

Description

In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restricted files on the Orchestrator server using the/debugFiles REST API.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Silver Peak Systems, Inc. Unity Orchestrator

  • All versions affected prior to Silver Peak Unity Orchestrator 8.9.11+affected
  • 8.10.11+affected
  • or 9.0.1+.affected

References