Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
By design, the built-in FTP server for iSeries AS/400 systems does not support a restricted document root, which allows attackers to read or write arbitrary files, including sensitive QSYS databases, via a full pathname in a GET or PUT request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
iSeries AS/400漏洞
Vulnerability Description
在设计上,iSeries AS/400系统的内置FTP服务器不支持受限文档root,攻击者可以通过一个GET或PUT请求中的完整路径名来读或写任意文件,包括敏感的QSYS数据库。
CVSS Information
N/A
Vulnerability Type
N/A