zenLogSrv: path traversal allows transfer of arbitrary files

zenLogSrv: path traversal allows transfer of arbitrary files

Description

A zenon installation with the zenon LOG Service (zenLogSrv) allowed to retrieve and load arbitrary files from a remote system over the network.

This behavior has been changed for:

  • zenon 12 and higher
  • zenon 8.20, 10 and 11 with build 101376 or higher

Now only regular log files for the Diagnosis Viewer can be loaded.



Item ID: 253435
Version: 10.00 Build: 102631