Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gv74-v3v2-h2x9

Опубликовано: 25 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewlog.pl of the VM Manager WebUI via the logfile parameter, allowing a remote authenticated attacker to read arbitrary files.

An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewlog.pl of the VM Manager WebUI via the logfile parameter, allowing a remote authenticated attacker to read arbitrary files.

EPSS

Процентиль: 24%
0.00081
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 6.5
nvd
около 2 лет назад

An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewlog.pl of the VM Manager WebUI via the logfile parameter, allowing a remote authenticated attacker to read arbitrary files.

EPSS

Процентиль: 24%
0.00081
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22