An issue was discovered in Biztalk360 through 11.5. because of mishandling of user-provided input in a path to be read by the server, a Super User attacker is able to read files on the system and/or coerce an authentication from the service, aka Directory Traversal.
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a, 11.0, 11.1, 11.2, 11.3, 11.4 |
Updated product to Biztalk360, added affected versions 11.0 to 11.4, changed severity to HIGH, updated CVSS score to 2.7, added CWE-22, and marked the vulnerability as actively exploited.
Initial creation
