CVE-2024-31947

{"id": "CVE-2024-31947", "cveTags": [], "metrics": {}, "published": "2024-07-12T23:15:10.000", "references": [{"url": "https://stonefly.com", "source": "cve@mitre.org"}, {"url": "https://stonefly.com/security-advisories/cve-2024-31947/", "source": "cve@mitre.org"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "StoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows Directory Traversal by authenticated users. Using a crafted path parameter with the Online Help facility can expose sensitive system information."}, {"lang": "es", "value": "StoneFly Storage Concentrator (SC y SCVM) anterior a 8.0.4.26 permite el Directory Traversal por parte de usuarios autenticados. El uso de un par\u00e1metro de ruta manipulado con la funci\u00f3n de ayuda en l\u00ednea puede exponer informaci\u00f3n confidencial del sistema."}], "lastModified": "2024-07-15T13:00:34.853", "sourceIdentifier": "cve@mitre.org"}