Vulnerability in Qbik Wingate

CVE-2000-1048

Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack via an HTTP GET request that uses encoded characters in the URL.

EPSS: 0.016 (73.9th percentile) — read the EPSS interpretation.

Affected products

  • Qbik Wingate — versions 2.1, 3.0, 4.0.1
  • N/a — versions n/a

References