CWE Code: 22
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Summary: a path traversal vulnerability in the web application component of micro focus filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the filr server. this vulnerability affects all versions of filr 3.x prior to security update 6.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2019-02-20
Last Modified Date: 2019-10-09