CVE-2013-3626

Опубликовано: 06 нояб. 2013

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Directory traversal vulnerability in the Session Server in Attachmate Verastream Host Integrator (VHI) 6.0 through 7.5 SP 1 HF 1 allows remote attackers to upload and execute arbitrary files via a crafted message.

Ссылки

http://support.attachmate.com/techdocs/2700.html
Vendor Advisory
http://www.kb.cert.org/vuls/id/436214
US Government Resource
http://support.attachmate.com/techdocs/2700.html
Vendor Advisory
http://www.kb.cert.org/vuls/id/436214
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:attachmate:verastream_host_integrator:6.0:*:*:*:*:*:*:*

cpe:2.3:a:attachmate:verastream_host_integrator:6.5:*:*:*:*:*:*:*

cpe:2.3:a:attachmate:verastream_host_integrator:6.6:*:*:*:*:*:*:*

cpe:2.3:a:attachmate:verastream_host_integrator:7.0:*:*:*:*:*:*:*

cpe:2.3:a:attachmate:verastream_host_integrator:7.1:*:*:*:*:*:*:*

cpe:2.3:a:attachmate:verastream_host_integrator:7.5:*:*:*:*:*:*:*

cpe:2.3:a:attachmate:verastream_host_integrator:7.5:sp1:*:*:*:*:*:*

EPSS

Процентиль: 57%

0.00352

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-32f3-6f6j-9xc3

github

больше 3 лет назад