CVE-2015-2862 Information

Description

Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29 8.x before 8.0.0.18 9.0 before 9.0.0.14 and 9.1 before 9.1.0.4 allows remote authenticated users to read arbitrary files via a crafted HTTP request.

Reference

http://www.kb.cert.org/vuls/id/919604