Описание
Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3.1.2 on Windows allows remote attackers to read arbitrary files, and consequently execute arbitrary code, via an unspecified HTTP request.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
Одно из
cpe:2.3:a:bluecoat:reporter:9.2.4.1:*:*:*:*:*:*:*
cpe:2.3:a:bluecoat:reporter:9.2.4.12:*:*:*:*:*:*:*
cpe:2.3:a:bluecoat:reporter:9.2.5:*:*:*:*:*:*:*
cpe:2.3:a:bluecoat:reporter:9.3.1.1:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
EPSS
Процентиль: 97%
0.31265
Средний
10 Critical
CVSS2
Дефекты
CWE-22
Связанные уязвимости
github
больше 3 лет назад
Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before 9.3.1.2 on Windows allows remote attackers to read arbitrary files, and consequently execute arbitrary code, via an unspecified HTTP request.
EPSS
Процентиль: 97%
0.31265
Средний
10 Critical
CVSS2
Дефекты
CWE-22