An issue was discovered in SquaredUp for SCOM 5.2.1.6654. The Download Log feature in System / Maintenance was susceptible to a local file inclusion vulnerability (when processing remote input in the log files downloaded by an authenticated administrator user), leading to the ability to read arbitrary files on the server filesystems.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Squaredup | Squaredup | * | 5.3.1 (excluding) |