CVE-2016-1605

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-08-01 · updated 2026-06-17
Weakness: CWE-22

Description

Directory traversal vulnerability in the ReportViewServlet servlet in the server in NetIQ Sentinel 7.4.x before 7.4.2 allows remote attackers to read arbitrary files via a PREVIEW value for the fileType field.

Affected products

NetIQ Sentinel: 7.4, 7.4.1

References

http://www.zerodayinitiative.com/advisories/ZDI-16-406
https://www.netiq.com/support/kb/doc.php?id=7017803
http://www.zerodayinitiative.com/advisories/ZDI-16-406
https://www.netiq.com/support/kb/doc.php?id=7017803

Get alerted when CVE-2016-1605 or the next vulnerability affects your stack