Описание
A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:a:inogard:ebiz4u:cviewer_object_1.0.5.1:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
EPSS
Процентиль: 58%
0.0037
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-494
CWE-494
Связанные уязвимости
github
больше 3 лет назад
A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however.
EPSS
Процентиль: 58%
0.0037
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-494
CWE-494