CNNVD-202507-702 Information
Jul 07, 2025
cve
CNNVD ID
CNNVD-202507-702
Related CVE
- CNNVD Published: 2025-07-07
Description (Chinese)
Marvell QConvergeConsole是美国Marvell公司的一款跨数据中心的统一适配器管理软件。 Marvell QConvergeConsole存在路径遍历漏洞，该漏洞源于compressDriverFiles方法未正确验证用户提供路径，可能导致信息泄露。
Description (English)
Marvell QConvergeConsole is a United States-based multi-data centre integrated adapter management software. Marvell QConvergeConsole has a loophole in its path, which stems from the failure of the compress Driver Files method to correctly verify the user ’ s supply path, which may lead to the disclosure of information.
Hazard Level
Medium
Vulnerability Type
路径遍历
Affected Vendor
Marwal Infotech
Published
2025-07-07
Last Modified
2026-02-24
References
https://www.zerodayinitiative.com/advisories/ZDI-25-452/
Share on: