CVE-2020-7882
anySign directory traversal vulnerability
Using the parameter of getPFXFolderList function, attackers can see the information of authorization certification and delete the files. It occurs because the parameter contains path traversal characters(ie. '../../../')
CVSS 3.1 · 7.5 High
EPSS 1.3%
KEV · Not listed
Vendors
Products