CVE-2015-4546

Опубликовано: 02 окт. 2015

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

Directory traversal vulnerability in EMC RSA OneStep 6.9 before build 559, as used in RSA Certificate Manager and RSA Registration Manager through 6.9 build 558 and other products, allows remote attackers to read arbitrary files via a crafted KCSOSC_ERROR_PAGE parameter.

Ссылки

http://packetstormsecurity.com/files/133784/RSA-OneStep-6.9-Path-Traversal.html
Third Party Advisory
VDB Entry
http://seclists.org/bugtraq/2015/Sep/135
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1033671
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/133784/RSA-OneStep-6.9-Path-Traversal.html
Third Party Advisory
VDB Entry
http://seclists.org/bugtraq/2015/Sep/135
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1033671
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:emc:rsa_certificate_manager:*:*:*:*:*:*:*:*

Версия до 6.9 (включая)

cpe:2.3:a:emc:rsa_onestep:*:*:*:*:*:*:*:*

Версия до 6.9 (включая)

EPSS

Процентиль: 87%

0.034

Низкий

7.8 High

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-w57f-gpxj-4hqm

github

больше 3 лет назад