Netmatch-s Ci vulnerabilities

2 known vulnerabilities in Netmatch-s Ci from Italtel. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Netmatch-s Ci: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-39812Jan 27, 2023Italtel

  Italtel NetMatch-S CI 5.2.0-20211008 allows Absolute Path Traversal under NMSCI-WebGui/SaveFileUploader. An unauthenticated user can upload files to an arbitrary path. An attacker can change the uploadDir parameter in a POST request (not possible using the GUI

• 9.1 Critical severity

  Netmatch-s Ci: Missing Authorization

  CVE-2022-39811Jan 27, 2023Italtel

  Italtel NetMatch-S CI 5.2.0-20211008 has incorrect Access Control under NMSCI-WebGui/advancedsettings.jsp and NMSCIWebGui/SaveFileUploader. By not verifying permissions for access to resources, it allows an attacker to view pages that are not allowed, and modi