CVE-2020-35736

HIGH WAF: High
CVSS 7.5 Published: 2020-12-27
CWE-22

GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused.

WAF Coverage Analysis

Path Traversal High WAF Coverage

OWASP: A01:2021 Broken Access Control

930xxx - Local File Inclusion

Affected Software

VendorProductVersion
liftoffsoftwaregateone1.1

References

Back to CVE Database