CVE-2015-2860 Directory traversal vulnerability in Avigilon Control Center (ACC) 4 before 4.12.0.54 and 5 before 5.4.2.22 allows remote attackers to read arbitrary files via a crafted help/ URL.
HighCVSS 7.8
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Avigilon Control Center (ACC) 4 before 4.12.0.54 and 5 before 5.4.2.22 allows remote attackers to read arbitrary files via a crafted help/ URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avigilon control center | <= 5.4.2.21 | No fix listed |
| avigilon control center | <= 4.12.0.53 | No fix listed |