| Package | Affected versions | Patched versions |
|---|---|---|
| remote application server | = 15.5 |
In the web interface of Parallels Remote Application Server (RAS) 15.5 Build 16140, a vulnerability exists due to improper validation of the file path when requesting a resource under the "RASHTML5Gateway" directory. A remote, unauthenticated attacker could exploit this weakness to read arbitrary files from the vulnerable system using path traversal sequences.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free