description: VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use, which may allow an attacker to read arbitrary files from local resources.
problem types: RELATIVE PATH TRAVERSAL CWE-23
affected:
{
product: VBASE Editor
vendor: VISAM
versions:
status: affected, version: 11.5.0.2
}
{
product: VBASE Web-Remote Module
vendor: VISAM
versions:
status: affected, version: all
}
