CVE-2000-1048: Qbik Wingate

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack via an HTTP GET request that uses encoded characters in the URL.

Affected products

• Qbik Wingate: version 2.1 only; version 3.0 only; version 4.0.1 only; version 4.1_beta_a only

Published 2000-12-11. Last modified 2026-06-16.