Executive Summary

This vulnerability exists in the ugw-restore method, which allows a remote attacker who has user privileges to delete arbitrary local files. The root cause is insufficient validation of user-controlled input, meaning the method does not properly check or restrict the input it receives from users, enabling malicious deletion of files.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to unauthorized deletion of local files by an attacker with user privileges. This can result in loss of important data, disruption of services, potential system instability, and could be exploited to remove critical files necessary for system operation or security.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows a remote attacker with user privileges to delete arbitrary local files due to insufficient validation of user-controlled input.

This unauthorized file deletion could lead to loss or tampering of sensitive data, which may impact compliance with data protection regulations such as GDPR and HIPAA that require safeguarding data integrity and availability.

However, specific impacts on compliance with these standards are not detailed in the provided information.

Useful 0 Not Useful 0