<p>SiPass integrated is affected by a directory traversal vulnerability in the third-party component DotNetZip. The vulnerability could allow an attacker to execute arbitrary code on the application server, if a specially crafted backup set is used for a restore.</p>
<p>Siemens has released a new version for SiPass integrated and recommends to update to the latest version.</p>
Source link
