CVE-2020-14946

MEDIUM

BSA Radar 1.6.7234.24750 - Local File Inclusion

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2020-14946 has a selected CVSS score of 4.3 (medium); EIP currently links 1 catalogued exploit.

Description

downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and earlier allows users to download transaction files. When downloading the files, a user is able to view local files on the web server by manipulating the FileName and FilePath parameters in the URL, or while using a proxy. This vulnerability could be used to view local sensitive files or configuration files.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBBSA Radar 1.6.7234.24750 - Local File InclusionExploitDB exploitby William SummerhillNot analyzed1 file
ExploitDB
PoC details

References

4