CVE-2023-42000

CRITICAL

Arcserve UDP Agent Unauthenticated Path Traversal File Upload

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-42000 has a selected CVSS score of 9.8 (critical).

Description

Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthenticated remote attacker can exploit it to upload arbitrary files to any location on the file system where the UDP agent is installed.

Description source: CVE List

Affected products and versions

1
ProductSourceVersion range

Arcserve UDP

Browse Arcserve / Arcserve UDP

Default status: unaffected

CVE ListBefore 9.2affected

References

2