CVE-2020-9324

Description

References

• aquaforest.com/en/release_history.asp · Release Notes
• criticalstart.com/multiple-vulnerabilities-discovered-in-tiff-server-from-aquaforest · Exploit
• criticalstart.com/resources · Third Party Advisory

tiff server 的其他漏洞

• CVE-2023-6352中危 5.3The default configuration of Aquaforest TIFF Server allows access to arbitrary file paths, subject to any restrictions imposed by Internet I…
• CVE-2020-9325高危 7.5Aquaforest TIFF Server 4.0 allows Unauthenticated Arbitrary File Download.
• CVE-2020-9323中危 5.3Aquaforest TIFF Server 4.0 allows Unauthenticated File and Directory Enumeration via tiffserver/tssp.aspx.