{"cvss":8.7,"datePublished":"2026-10-22T00:00:00Z","dateUpdated":"2026-10-22T00:00:00Z","description":"YouDataSum CPAS Audit Management System V4 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the fileId parameter. Attackers can send GET requests to /cpasm4/plugInManController/downPlugs with ../ sequences in fileId to retrieve system files like /etc/passwd. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-01-13.","dueDate":"","id":"CVE-2024-58396","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"CPAS Audit Management System","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"  Improper Limitation of a Pathname to a Restricted Directory","vendor":"YouDataSum"}