| Package | Affected versions | Patched versions |
|---|---|---|
| openwsman | ≤ 2.6.9 |
Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted HTTP request to openwsman server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free