CVE-2020-9050 - CVE House
Back to Database
Status published High CVE-2020-9050

Metasys Reporting Engine (MRE) Web Services - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Vulnerability Description

Path Traversal vulnerability exists in Metasys Reporting Engine (MRE) Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-9050

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • TIM Security Team Red Research

References

More from Johnson Controls

View All →
CVE-2025-61740
Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG Origin Validation Error
High 7.2
CVE-2025-61739
Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryption
High 7.2
CVE-2025-61738
Johnson Controls PowerG and IQPanel cleartext transmission of sensitive information
Low 2.3
CVE-2025-61736
iSTAR- Improper Validation of Certificate Expiration
High 7.1
CVE-2025-43876
iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - get8021xSettings
High 8.7

Affected Vendor

Johnson Controls

View all reports →

Affected Software

Metasys Reporting Engine (MRE) Web Services versions 2.0 and 2.1
Vulnerable Versions:
2.0, 2.1

Timeline

Official Publish: February 19th, 2021
Last Modified: September 16th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.