| Package | Affected versions | Patched versions |
|---|---|---|
| udp | < 9.2 | 9.2 |
Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthenticated remote attacker can exploit it to upload arbitrary files to any location on the file system where the UDP agent is installed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free