An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04.008 MBGID-6303. Path validation is mishandled, and thus an admin can read or delete files in violation of expected access controls.
This Cyber News was published on www.tenable.com. Publication date: Sun, 04 Feb 2024 22:41:03 +0000