GeoVision Digital Video Surveillance System Directory Traversal Vulnerability
Description
Dejan Levaja has reported a vulnerability in GeoVision Digital Video Surveillance System, which can be exploited by malicious people to disclose sensitive information.
The vulnerability is caused due to an input validation error in the included HTTP server when processing GET requests. This can be exploited to read arbitrary files from an affected system via directory traversal attacks.
The vulnerability is reported in version 8.2. Prior versions may also be affected.
Vulnerable Products
Vulnerable Software: GeoVision Digital Video Surveillance System 8.x
