CVE-2021-28485

https://notcve.org/view.php?id=CVE-2021-28485

14 Sep 2023 — In Ericsson Mobile Switching Center Server (MSC-S) before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application. En Ericsson Mobile Switching Center Server (MSC-S) anterior a IS 3.1 CP22, la aplicación web SIS permite el Path Traversal a través de un parámetro específico en la solicitud https después de la autenticación, l... • https://www.ericsson.com/en/about-us/security/psirt • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •