| Package | Affected versions | Patched versions |
|---|---|---|
| autosave | ≥ 7.00, ≤ 7.04< 6.02.06 | 6.02.06 |
| autosave for system platform | = 5.00< 4.01 | 4.01 |
An attacker can gain knowledge of a session temporary working folder where the getfile and putfile commands are used in MDT AutoSave versions prior to v6.02.06. An attacker can leverage this knowledge to provide a malicious command to the working directory where the read and write activity can be initiated.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free