CVE-2014-7866
18h00 +00:00
CVE の説明
CVE の情報
関連する弱点
| 弱点名 | 出典 | |
|---|---|---|
| Improper Limitation of a Pathname to a Restricted Directory The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. |
メトリクス
| メトリクス | スコア | 深刻度 | CVSS ベクター | 出典 |
|---|---|---|---|---|
| V2 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P | nvd@nist.gov |
EPSS
EPSSスコア
EPSSパーセンタイル
エクスプロイト情報
Exploit Database EDB-ID : 35209
公開日 : 2014-11-09 23h00 +00:00
著者 : Pedro Ribeiro
EDB検証済み : No
Exploit Database EDB-ID : 43896
公開日 : 2014-11-08 23h00 +00:00
著者 : Pedro Ribeiro
EDB検証済み : No
関連製品
構成 0
Zohocorp>>Manageengine_social_it_plus >> Version 11.0
構成 0
Zohocorp>>Manageengine_it360 >> Version 10.3.0
Zohocorp>>Manageengine_it360 >> Version 10.4
構成 0
Zohocorp>>Manageengine_opmanager >> Version 8.8
Zohocorp>>Manageengine_opmanager >> Version 9.0
Zohocorp>>Manageengine_opmanager >> Version 9.1
Zohocorp>>Manageengine_opmanager >> Version 9.2
Zohocorp>>Manageengine_opmanager >> Version 9.4
Zohocorp>>Manageengine_opmanager >> Version 10.0
Zohocorp>>Manageengine_opmanager >> Version 10.1
Zohocorp>>Manageengine_opmanager >> Version 10.2
Zohocorp>>Manageengine_opmanager >> Version 11.0
Zohocorp>>Manageengine_opmanager >> Version 11.1
Zohocorp>>Manageengine_opmanager >> Version 11.2
Zohocorp>>Manageengine_opmanager >> Version 11.3
Zohocorp>>Manageengine_opmanager >> Version 11.4
参考資料
Tags : x_refsource_MISC
Tags : mailing-list, x_refsource_BUGTRAQ
