This vulnerability (CWE-22) in Komtera Technolgies KLog Server involves improper limitation of a pathname to a restricted directory, enabling path traversal attacks. An attacker with network access and low privileges can manipulate web input to access files outside the intended directory scope. The issue affects versions before 3.1.1. The CVSS vector indicates the attack requires adjacent network access, low attack complexity, low privileges, no user interaction, unchanged scope, and results in high confidentiality impact without affecting integrity or availability.

Successful exploitation can lead to unauthorized disclosure of sensitive files on the server due to path traversal, compromising confidentiality. There is no impact on integrity or availability reported. The vulnerability requires low privileges and no user interaction but access from an adjacent network, limiting the attack surface somewhat.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is documented, users should monitor vendor communications for updates. Until a patch is available, restrict network access to the KLog Server to trusted sources and consider additional access controls to limit exposure.