ID:11149 - Exploit for Absolute Path Traversal in Endpoint Manager - CVE-2024-13159

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to insufficient input validation. A remote non-authenticated attacker can view contents of arbitrary files on the system and use the obtain information to execute arbitrary code.

Remediation