Описание
Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snap_file parameter in the /it-IT/splunkd/__raw/services/get_snapshot HTTP API endpoint. A ‘low privileged’ attacker can read any file on the target host.
Ссылки
- Product
- https://www.shielder.it/advisories/corero_secure_watch_managed_services-get_snapshot-path-traversal/ExploitThird Party Advisory
- Product
- https://www.shielder.it/advisories/corero_secure_watch_managed_services-get_snapshot-path-traversal/ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:corero:securewatch_managed_services:9.7.2.0020:*:*:*:*:*:*:*
EPSS
Процентиль: 59%
0.00382
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22
Связанные уязвимости
github
больше 3 лет назад
Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snap_file parameter in the /it-IT/splunkd/__raw/services/get_snapshot HTTP API endpoint. A ‘low privileged’ attacker can read any file on the target host.
EPSS
Процентиль: 59%
0.00382
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22