A directory traversal vulnerability exists in RUCKUS SmartZone (SZ) versions before 6.1.2p3 Refresh Build, allowing an attacker with limited privileges to read arbitrary files outside the intended directory. This vulnerability does not allow modification or denial of service but can expose sensitive information.