Zoho ManageEngine ADAudit Plus prior to 7270 allows admin users to view names of arbitrary directories via path traversal.
zohocorp manageengine adaudit plus 7.2