Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to read arbitrary files via an HTTP request containing ... (triple dot) sequences.
| Software | From | Fixed in |
|---|---|---|
| surfcontrol / web_filter | 4.1 | 4.1.x |
| surfcontrol / superscout_web_filter | 3.0 | 3.0.x |
| surfcontrol / web_filter | 4.0 | 4.0.x |
| surfcontrol / superscout_web_filter | 3.0.3 | 3.0.3.x |