CVE-2023-42000 — Arcserve UDP Agent Unauthenticated Path Traversal File Upload
Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthenticated remote attacker can exp…
Published: 2023-11-27 · CVSS: 9.8 · CVSS 3.1
Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthenticated remote attacker can exploit it to upload arbitrary files to any location on the file system where the UDP agent is installed.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7