CVE-2020-24624: Path Traversal
Published Sep 23, 2020
·Updated
Unathenticated directory traversal in the DownloadServlet class execute() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.
Affected Software
1 affected component
HPE Utility Computing Service Meter=1.9
Event History
Sep 23, 2020
CVE Published
via MITRE·12:41 PM
Data Sourced
via MITRE·12:41 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-24624?
CVE-2020-24624 has a medium severity rating due to potential unauthorized access to sensitive files.
2
How does CVE-2020-24624 exploit the system?
CVE-2020-24624 exploits the system through unauthenticated directory traversal vulnerabilities in the DownloadServlet class.
3
What are the potential consequences of CVE-2020-24624?
The potential consequences of CVE-2020-24624 include arbitrary file reads, which may expose sensitive data.
4
How do I fix CVE-2020-24624?
To fix CVE-2020-24624, it is recommended to apply the latest patches provided by HPE for the Utility Computing Service Meter.
5
Which version of HPE Utility Computing Service Meter is affected by CVE-2020-24624?
CVE-2020-24624 specifically affects HPE Utility Computing Service Meter version 1.9.