Anonymous users can upload arbitrary files into the uploads directory. (282390)
Anonymous users can upload arbitrary files into the uploads directory.
Anonymous users can upload arbitrary files to the upload directory, which is against the best practice guidelines.
An anonymous attacker can upload a file by sending a POST request (index.php?_fileupload_marker=true).
A change request PAM-9651 has been submitted to the product team to investigate and remedy this issue.
© 2019 One Identity LLC. ALL RIGHTS RESERVED.