Vulnerability in Qbik Wingate

CVE-2004-0578

WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbitrary files via leading slash (//) characters in a URL request to the wingate-internal directory.

EPSS: 0.014 (69.0th percentile) — read the EPSS interpretation.

Affected products

Qbik Wingate — versions 5.0.5, 5.2.3, 6.0_beta_2
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_FULLDISC)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_XF)