CVE Catalog
CVE-2017-7239
CriticalSummary
Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service (process hang) via a crafted filename.
Risk Assessment
Attackers could exploit this vulnerability to gain access to confidential data or disrupt system operations, potentially leading to serious consequences for the organization.
Recommendation
It is recommended to update Ninka to version 1.3.2 or later to mitigate this vulnerability.
Original NVD description (English source)
Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service (process hang) via a crafted filename.