CorryL has reported a vulnerability in CIS WebServer, which can be exploited by malicious people to gain knowledge of potentially sensitive information.

The vulnerability is caused due to an input validation error and can be exploited to read the contents of arbitrary files outside the web root via directory traversal attacks.

The vulnerability has been reported in version 3.5.13. Other versions may also be affected.

Solution
Filter malicious characters and character sequences in a proxy or firewall with URL filtering capabilities.
Further details available to Secunia VIM customers

Provided and/or discovered by
CorryL

Deep Links
Links available to Secunia VIM customers