CVE-2020-9354

HIGH

SmartClient 12.0 - Unauthenticated Path Traversal and Arbitrary File Write via Developer Console RPC

Title source: llm

Description

An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) saveFile provided by the console functionality on the /tools/developerConsoleOperations.jsp (or /isomorphic/IDACall) URL allows an unauthenticated attacker to overwrite files via vectors involving an XML comment and /.. path traversal.

References (1)

Core 1

Core References

Exploit, Mailing List, Third Party Advisory x_refsource_misc

https://seclists.org/fulldisclosure/2020/Feb/18

Scores

CVSS v3 7.5

EPSS 0.0118

EPSS Percentile 63.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE

CWE-22

Status published

Products (1)

smartclient/smartclient 12.0

Published Feb 23, 2020

Tracked Since Feb 18, 2026