Summary
In XIQ-SE, due to a missing access control check, a path traversal is possible which may lead to privilege escalation.
Products Potentially Affected
OS/Product
|
Exposure
|
ExtremeCloud IQ - Site Engine (XIQ-SE)
|
Yes
|
Repair Recommendations
ExtremeCloud IQ - Site Engine (XIQ-SE):
- Fixed in 24.2.11 or later.
Please see the full security advisory article here for more details and updates.