| Package | Affected versions | Patched versions |
|---|---|---|
| manageengine netflow analyzer | = 7.0.0.2 |
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. An Absolute Path Traversal vulnerability in the Administration zone, in /netflow/servlet/CReportPDFServlet (via the parameter schFilePath), allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via any file name, such as a schFilePath=C:\boot.ini value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free