漏洞描述
Directory Traversal vulnerability in FileMage Gateway Windows Deployments v.1.10.8 and before allows a remote attacker to obtain sensitive information via a crafted request to the /mgmt/ component.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
raindayzz.comhttps://raindayzz.com/technicalblog/2023/08/20/FileMage-Vulnerability.html↗securityonline.infohttps://securityonline.info/cve-2023-39026-filemage-gateway-directory-traversal-vulnerability/↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2023-39026↗www.filemage.iohttps://www.filemage.io/docs/updates.html#change-log↗packetstormsecurity.comhttp://packetstormsecurity.com/files/174491/FileMage-Gateway-1.10.9-Local-File-Inclusion.html↗