Arbitrary File Access Vulnerability in GroupSession Free Edition, GroupSession byCloud, and GroupSession ZION ver5.1.1 and Earlier

CVE-2021-20874 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Incorrect permission assignment for critical resource vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows a remote unauthenticated attacker to access arbitrary files on the server and obtain sensitive information via unspecified vectors.

Learn more about our Cis Benchmark Audit For Server Software.