CVE-2016-7843

Опубликовано: 28 апр. 2017

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

Directory traversal vulnerability in AttacheCase for Java 0.60 and earlier, AttacheCase Lite 1.4.6 and earlier, and AttacheCase Pro 1.5.7 and earlier allows remote attackers to read arbitrary files via specially crafted ATC file.

Ссылки

http://jvn.jp/en/jp/JVN28331227/index.html
Third Party Advisory
VDB Entry
http://maruuofactory.life.coocan.jp/attachecase/#pathTraversal
Third Party Advisory
http://www.securityfocus.com/bid/95445
Third Party Advisory
VDB Entry
http://jvn.jp/en/jp/JVN28331227/index.html
Third Party Advisory
VDB Entry
http://maruuofactory.life.coocan.jp/attachecase/#pathTraversal
Third Party Advisory
http://www.securityfocus.com/bid/95445
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hibara_software:attachecase_for_java:*:*:*:*:*:*:*:*

Версия до 0.6.0 (включая)

cpe:2.3:a:hibara_software:attachecase_lite:*:*:*:*:*:*:*:*

Версия до 1.4.6 (включая)

cpe:2.3:a:hibara_software:attachecase_pro:*:*:*:*:*:*:*:*

Версия до 1.5.7 (включая)

EPSS

Процентиль: 91%

0.06623

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-457g-f88f-3329