StoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows Directory Traversal by authenticated users. Using a crafted path parameter with the Online Help facility can expose sensitive system information.
Products Affected
| Vendor | Product | Version |
|---|---|---|
| stonefly | storage_concentrator | * |