Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-14614

Опубликовано: 10 окт. 2017
Источник: nvd
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before 1.9.7, and 8.x before 8.1.5 allows remote authenticated users to read arbitrary files on remote cluster nodes via a crafted path.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gridgain:gridgain:8.0.0:ea1:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.0:ea2:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.0:ea3:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.0:ea4:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.0:ea5:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.1:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.1:ea1:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.1:ea2:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.1:ea3:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.1:ea4:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.1:ea5:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.1:ea6:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.1:ea7:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.1:ea8:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.1:ea9:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.2:ea1:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.2:ea2:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.2:ea3:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.3:ea1:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.3:ea10:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.3:ea11:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.3:ea12:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.3:ea13:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.3:ea14:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.3:ea15:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.3:ea16:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.3:ea2:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.3:ea3:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.3:ea4:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.3:ea5:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.3:ea6:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.3:ea7:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.3:ea8:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.3:ea9:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.0.4:ea1:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.1.1:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.1.2:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.1.3:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.1.3:p1:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.1.3:p2:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.1.3:p3:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.1.3:p4:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.1.3:p5:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.1.4:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.1.4:p1:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.1.4:p2:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:8.1.4:p3:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:gridgain:gridgain:1.9.1:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:1.9.2:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:1.9.3:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:1.9.4:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:1.9.5:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:1.9.6:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:a:gridgain:gridgain:1.8.1:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:1.8.2:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:1.8.3:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:1.8.4:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:1.8.5:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:1.8.6:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:1.8.7:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:1.8.8:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:1.8.9:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:1.8.10:*:*:*:*:*:*:*
cpe:2.3:a:gridgain:gridgain:1.8.11:*:*:*:*:*:*:*
Конфигурация 4
cpe:2.3:a:gridgain:gridgain:*:*:*:*:*:*:*:*
Версия до 1.7.15 (включая)

EPSS

Процентиль: 65%
0.00485
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

github логотип

GHSA-jv6w-84rc-rmvf

CVSS3: 6.5
github
больше 3 лет назад

Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before 1.9.7, and 8.x before 8.1.5 allows remote authenticated users to read arbitrary files on remote cluster nodes via a crafted path.

EPSS

Процентиль: 65%
0.00485
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-22