Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying the target file in the LOG parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Critical Path InJoin Directory Server文件泄露漏洞
Vulnerability Description
Critical Path提供一款支持LDAP (Lightweight Directory Access Protocol)的目录服务器InJoin，InJoin Directory Server可使用在Microsoft Windows和Unix操作系统下，iCon提供InJoin Directory Server WEB管理接口功能。 iCon对用户提供给日志条目参数的数据缺少正确充分的检查，可导致远程攻击者在登录iCon WEB接口后以iCon进程的权限在目标系统上查看任意文件。 合法用户名和密码
CVSS Information
N/A
Vulnerability Type
N/A