CVE-2015-4068

Опубликовано: 29 мая 2015

Источник: nvd

CVSS3: 9.1

CVSS2: 9.4

EPSS Высокий

Описание

Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted file path to the (1) reportFileServlet or (2) exportServlet servlet.

Ссылки

http://documentation.arcserve.com/Arcserve-UDP/Available/V5/ENU/Bookshelf_Files/HTML/Update%204/UDP_Update4_ReleaseNotes.html
Release Notes
Vendor Advisory
http://www.securityfocus.com/bid/74845
Broken Link
Third Party Advisory
VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-15-241/
Third Party Advisory
VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-15-242/
Third Party Advisory
VDB Entry
http://documentation.arcserve.com/Arcserve-UDP/Available/V5/ENU/Bookshelf_Files/HTML/Update%204/UDP_Update4_ReleaseNotes.html
Release Notes
Vendor Advisory
http://www.securityfocus.com/bid/74845
Broken Link
Third Party Advisory
VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-15-241/
Third Party Advisory
VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-15-242/
Third Party Advisory
VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-4068

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:arcserve:udp:*:*:*:*:*:*:*:*

Версия до 5.0 (исключая)

cpe:2.3:a:arcserve:udp:5.0:-:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.81937

Высокий

9.1 Critical

CVSS3

9.4 Critical

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-rcg3-4524-mq7j