OpenConnect WebConnect is reported prone to multiple vulnerabilities. The following individual issues are reported: WebConnect is reported prone to a remote denial of service vulnerability. A remote attacker may exploit this vulnerability to crash the WebConnect software and deny service for legitimate users. A directory traversal vulnerability is also reported to affect WebConnect. This issue is reported to exist due to a lack of sufficient sanitization performed on a user-supplied URI parameter that is passed to the 'jretest.html' script. A remote attacker may exploit this vulnerability to disclose the contents of server readable files.
OpenConnect WebConnect is reported prone to multiple vulnerabilities. The following individual issues are reported: WebConnect is reported prone to a remote denial of service vulnerability. A remote attacker may exploit this vulnerability to crash the WebConnect software and deny service for legitimate users. A directory traversal vulnerability is also reported to affect WebConnect. This issue is reported to exist due to a lack of sufficient sanitization performed on a user-supplied URI parameter that is passed to the 'jretest.html' script. A remote attacker may exploit this vulnerability to disclose the contents of server readable files.