CVE-2023-6352

Summary

CVE-2023-6352 is a vulnerability affecting Aquaforest TIFF Server's default configuration. This issue grants unauthorized access to arbitrary file paths, with potential restrictions from IIS or Windows. The severity of this vulnerability depends on the configuration of the TIFF Server in a web application. A remote attacker could exploit this flaw to enumerate files, traverse directories, bypass authentication, or access restricted files, posing a significant threat to data security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.