TI-2020-07454 CVE-2020-9325 · GHSA-j2mr-g97h-rwr5
Aquaforest TIFF Server 4.0 allows Unauthenticated Arbitrary File Download.
Priority LOW 36
Aquaforest TIFF Server 4.0 allows Unauthenticated Arbitrary File Download.
No Aquaforest vulnerabilities are listed in CISA KEV.
4 records
Aquaforest TIFF Server 4.0 allows Unauthenticated Arbitrary File Download.
Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC.
Aquaforest TIFF Server 4.0 allows Unauthenticated File and Directory Enumeration via tiffserver/tssp.aspx.
The default configuration of Aquaforest TIFF Server allows access to arbitrary file paths, subject to any restrictions imposed by Internet Information Services (IIS) or Microsoft Windows.