A vulnerability has been identified in SINEC NMS (All...
Moderate severity
Unreviewed
Published
Aug 13, 2024
to the GitHub Advisory Database
•
Updated Aug 13, 2024
Description
Published by the National Vulnerability Database
Aug 13, 2024
Published to the GitHub Advisory Database
Aug 13, 2024
Last updated
Aug 13, 2024
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The importCertificate function of the SINEC NMS Control web application contains a path traversal vulnerability. This could allow an authenticated attacker it to delete arbitrary certificate files on the drive SINEC NMS is installed on.
References