Описание
Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link.
Ссылки
- Release NotesVendor Advisory
- Release NotesVendor Advisory
- Release NotesVendor Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:leostream:connection_broker:9.0.40.17:*:*:*:*:*:*:*
EPSS
Процентиль: 43%
0.00207
Низкий
4.9 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-59
Связанные уязвимости
CVSS3: 4.9
github
около 4 лет назад
Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link.
EPSS
Процентиль: 43%
0.00207
Низкий
4.9 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-59