CVE-2017-7424: Path Traversal
A Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote authenticated users to download arbitrary files from a system running the product, if this component is configured. Note esfadmingui is not enabled by default.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7424?
CVE-2017-7424 is classified as a high severity vulnerability due to its potential for remote exploitation by authenticated users.
How do I fix CVE-2017-7424?
To fix CVE-2017-7424, users should apply Hotfix 8 for version 2.3, or Hotfix 9 for version 2.3 Update 2 of Micro Focus Enterprise Developer and Enterprise Server.
Who is affected by CVE-2017-7424?
CVE-2017-7424 affects users of Micro Focus Enterprise Developer and Enterprise Server versions 2.3, including Update 1 and Update 2 before specific hotfixes are applied.
What type of vulnerability is CVE-2017-7424?
CVE-2017-7424 is a Path Traversal vulnerability allowing remote authenticated users to download arbitrary files.
Can CVE-2017-7424 be exploited without authentication?
No, CVE-2017-7424 requires the attacker to be an authenticated user to exploit the vulnerability.