FICHE CVE

CVE-2023-6352

Publiée le 2023-11-30 · Dernière modification le 2026-06-17

The default configuration of Aquaforest TIFF Server allows access to arbitrary file paths, subject to any restrictions imposed by Internet Information Services (IIS) or Microsoft Windows. Depending on how a web application uses and configures TIFF Server, a remote attacker may be able to enumerate files or directories, traverse directories, bypass authentication, or access restricted files.

CVSS 3.15.3 MOYENNE

Type de faiblesse

Traversée de répertoires · CWE-22