CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DonnellC Global Gateway e4 | Payeezy Gateway | globe-gateway-e4.This issue affects Global Gateway e4 | Payeezy Gateway |: from n/a through <= 2.0.
Explanation of Vulnerability in Simple Terms
Global Gateway e4 and Payeezy Gateway versions 2.0 and earlier contain a path traversal vulnerability that allows an unauthenticated attacker to disrupt service availability. The vulnerability exists in how the gateway processes file paths, enabling attackers to access or manipulate files outside intended directories. No authentication or user interaction is required to exploit this issue.
What an attacker can do
Disrupt service availability by accessing or manipulating files outside intended directories.
Potential impact on your site
Payment processing may become unavailable or unstable if the gateway is exploited.
Conditions required to exploit
Network access to the affected gateway; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
