CVE-2022-26675: aEnrich a+HRD - Path Traversal
aEnrich a+HRD has inadequate filtering for special characters in URLs. An unauthenticated remote attacker can bypass authentication and perform path traversal attacks to access arbitrary files under website root directory.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2022-26675?
CVE-2022-26675 is a vulnerability in aEnrich a+HRD that allows an unauthenticated remote attacker to bypass authentication and perform path traversal attacks to access arbitrary files under the website root directory.
What is the severity of CVE-2022-26675?
The severity of CVE-2022-26675 is high with a CVSS score of 7.5.
How does CVE-2022-26675 affect aEnrich a+HRD?
CVE-2022-26675 affects aEnrich a+HRD version 6.8 by allowing an unauthenticated remote attacker to bypass authentication and perform path traversal attacks.
How can an attacker exploit CVE-2022-26675?
An attacker can exploit CVE-2022-26675 by using special characters in URLs to bypass authentication and access arbitrary files under the website root directory.
Is there a fix available for CVE-2022-26675?
At the moment, there is no information available about a fix for CVE-2022-26675. It is recommended to follow the guidance provided by the vendor or security advisories for updates.