CVE:CVE-2018-6885
CNNVD:CNNVD-201905-591
MicroStrategy Web Services 10.4 Hotfix 7之前版本和10.11之前版本中存在路径遍历漏洞。该漏洞源于网络系统或产品未能正确地过滤资源或文件路径中的特殊元素。攻击者可利用该漏洞访问受限目录之外的位置。
solution:Upgrade microstrategy web_services to a higher version than 10.4,10.11,10.4,10.4:hotfix_1,10.4:hotfix_2,10.4:hotfix_3,10.4:hotfix_4,10.4:hotfix_5,10.4:hotfix_6,and avoid the version (,10.4),[10.5,10.11),10.4,10.4:hotfix_1,10.4:hotfix_2,10.4:hotfix_3,10.4:hotfix_4,10.4:hotfix_5,10.4:hotfix_6