Описание
Directory traversal vulnerability in the PXE Mtftp service in Hitachi JP1/ServerConductor/DeploymentManager before 08-55 Japanese and before 08-51 English allows remote attackers to read arbitrary files via unknown vectors.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 08-07 (включая)Версия до 08-07 (включая)
Одно из
cpe:2.3:a:hitachi:jp1\/serverconductor\/deploymentmanager:*:-:enterprise:en:*:*:*:*
cpe:2.3:a:hitachi:jp1\/serverconductor\/deploymentmanager:*:-:standard:en:*:*:*:*
cpe:2.3:a:hitachi:jp1\/serverconductor\/deploymentmanager:08-06:-:enterprise:en:*:*:*:*
cpe:2.3:a:hitachi:jp1\/serverconductor\/deploymentmanager:08-06:-:standard:en:*:*:*:*
Конфигурация 2Версия до 08-50-\/b (включая)Версия до 08-50-\/b (включая)
Одно из
cpe:2.3:a:hitachi:jp1\/serverconductor\/deploymentmanager:*:-:enterprise:ja:*:*:*:*
cpe:2.3:a:hitachi:jp1\/serverconductor\/deploymentmanager:*:-:standard:ja:*:*:*:*
cpe:2.3:a:hitachi:jp1\/serverconductor\/deploymentmanager:07-52:-:enterprise:ja:*:*:*:*
cpe:2.3:a:hitachi:jp1\/serverconductor\/deploymentmanager:07-52:-:standard:ja:*:*:*:*
cpe:2.3:a:hitachi:jp1\/serverconductor\/deploymentmanager:07-56:-:enterprise:ja:*:*:*:*
cpe:2.3:a:hitachi:jp1\/serverconductor\/deploymentmanager:07-56:-:standard:ja:*:*:*:*
cpe:2.3:a:hitachi:jp1\/serverconductor\/deploymentmanager:07-56-\/g\(\*2\):-:enterprise:ja:*:*:*:*
cpe:2.3:a:hitachi:jp1\/serverconductor\/deploymentmanager:07-56-\/g\(\*2\):-:standard:ja:*:*:*:*
cpe:2.3:a:hitachi:jp1\/serverconductor\/deploymentmanager:08-00:-:enterprise:ja:*:*:*:*
cpe:2.3:a:hitachi:jp1\/serverconductor\/deploymentmanager:08-00:-:standard:ja:*:*:*:*
Конфигурация 3Версия до 06-00-\/a (включая)
Одно из
cpe:2.3:a:hitachi:serverconductor\/deploymentmanager:*:-:-:ja:*:*:*:*
cpe:2.3:a:hitachi:serverconductor\/deploymentmanager:01-00:-:-:ja:*:*:*:*
cpe:2.3:a:hitachi:serverconductor\/deploymentmanager:01-01:-:-:ja:*:*:*:*
cpe:2.3:a:hitachi:serverconductor\/deploymentmanager:06-00:-:-:ja:*:*:*:*
EPSS
Процентиль: 64%
0.00462
Низкий
5 Medium
CVSS2
Дефекты
CWE-22
Связанные уязвимости
github
больше 3 лет назад
Directory traversal vulnerability in the PXE Mtftp service in Hitachi JP1/ServerConductor/DeploymentManager before 08-55 Japanese and before 08-51 English allows remote attackers to read arbitrary files via unknown vectors.
EPSS
Процентиль: 64%
0.00462
Низкий
5 Medium
CVSS2
Дефекты
CWE-22