Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2020-9050

Metasys Reporting Engine (MRE) Web Services - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jci

Description

Path Traversal vulnerability exists in Metasys Reporting Engine (MRE) Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Johnson Controls Metasys Reporting Engine (MRE) Web Services versions 2.0 and 2.1

  • 2.0affected
  • 2.1affected

References