Quest Foglight for Databases FileServlet path disclosure vulnerability
FileServlet external control of file path information disclosure allows sensitive data exposure.
50
CVE-2026-92193
File Path Disclosure in Quest Foglight for Databases FileServlet
- CVSS 3.0
- 6.5 medium
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Quest Foglight for Databases FileServlet lacks validation of user-supplied paths in file operations. Authenticated remote attackers can trigger this to disclose sensitive information in the SYSTEM context. Affected are installations of Quest Foglight for Databases.
What to do: Apply Quest's update for CVE-2026-92193. No workaround provided.
| Product | Affected |
|---|---|
| Quest Foglight for Databases | — |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The specific flaw exists within the FileServlet class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of SYSTEM. Was ZDI-CAN-29216.
- Weakness
- CWE-73
- Vector
- CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N