| |
Vulnerability CVE-2022-1359
Published: 2022-05-17
| Description: |
The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a restricted directory inside a specific route. If an attacker supplied path traversal charters (../) as part of a filename, the server will save the file where the attacker chooses. This could allow an attacker to write any data to any file in the server. |
Type:
CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
)
References: |
https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
