CVE-2020-24626: Path Traversal
Published Sep 23, 2020
·Updated
Unathenticated directory traversal in the ReceiverServlet class doPost() method can lead to arbitrary remote code execution in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.
Affected Software
1 affected component
HPE Utility Computing Service Meter=1.9
Event History
Sep 23, 2020
CVE Published
via MITRE·12:41 PM
Data Sourced
via MITRE·12:41 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-24626?
CVE-2020-24626 is classified as critical due to the potential for arbitrary remote code execution.
2
How do I fix CVE-2020-24626?
To mitigate CVE-2020-24626, upgrade HPE Pay Per Use Utility Computing Service Meter to version 1.9 or apply recommended security patches.
3
What systems are affected by CVE-2020-24626?
CVE-2020-24626 specifically affects HPE Pay Per Use Utility Computing Service Meter version 1.9.
4
What is the vulnerability type of CVE-2020-24626?
CVE-2020-24626 is a directory traversal vulnerability that can lead to remote code execution.
5
Is authentication required to exploit CVE-2020-24626?
CVE-2020-24626 can be exploited without authentication, making it particularly dangerous.