Users with permission to download logs can use the .. path identifier to download any file accessible by the server user.
..
f219028
Remove the Edit Users and Download Server Logs permissions from all users that should not have access to the host filesystem.
Edit Users
Download Server Logs
Impact
Users with permission to download logs can use the
..path identifier to download any file accessible by the server user.Patches
f219028
Workarounds
Remove the
Edit UsersandDownload Server Logspermissions from all users that should not have access to the host filesystem.