CyberSec.Space Logo
Back to CVE Browser

CVE-2020-11431

CRITICAL
9.1
CVSS Severity Score
EPSS Score0.1410%
EPSS Percentile5.26th
PublishedMay 7, 2020
Last ModifiedNov 21, 2024

Vulnerability Description

The documentation component in i-net Clear Reports 16.0 to 19.2, HelpDesk 8.0 to 8.3, and PDFC 4.3 to 6.2 allows a remote unauthenticated attacker to read arbitrary system files and directories on the target server via Directory Traversal.

Affected Platforms (CPE)

📦
Inetsoftware

Clear Reports

>= 16.0 and <= 19.2
📦
Inetsoftware

Helpdesk

>= 8.0 and <= 8.3
📦
Inetsoftware

Pdfc

>= 4.3 and <= 6.2

References & Advisories

🔗 https://www.inetsoftware.de/documentation/clear-reports/release-notes/releases/changes_19.2
🔗 https://www.inetsoftware.de/support/news/i-net-clear-reports-security-advisory-2020-apr-06
🔗 https://www.inetsoftware.de/support/news/i-net-helpdesk-sicherheitsankuendigung-2020-apr-06
🔗 https://www.inetsoftware.de/support/news/i-net-pdfc-security-advisory-2020-apr-06
🔗 https://www.inetsoftware.de/documentation/clear-reports/release-notes/releases/changes_19.2
🔗 https://www.inetsoftware.de/support/news/i-net-clear-reports-security-advisory-2020-apr-06
🔗 https://www.inetsoftware.de/support/news/i-net-helpdesk-sicherheitsankuendigung-2020-apr-06
🔗 https://www.inetsoftware.de/support/news/i-net-pdfc-security-advisory-2020-apr-06

Related Vulnerabilities

CVE-2013-740510.0

The Ad Hoc Reporting feature in GE Healthcare Centricity DMS 4.2 has a password of Never!Mind for the Administrator user, which ha...

CVE-2020-126849.8

XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, when XML in...

CVE-2007-39449.3

Multiple heap-based buffer overflows in the Perl Compatible Regular Expressions (PCRE) library in the JavaScript engine in WebKit ...

CVE-2021-44408.8

In the Linux kernel, the following vulnerability has been resolved: x86/xen: Drop USERGS_SYSRET64 paravirt call commit afd30525a...