CVE-2014-7866
18h00 +00:00
CVE 描述
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Improper Limitation of a Pathname to a Restricted Directory The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. |
指标
| 指标 | 评分 | 严重程度 | CVSS 向量 | 来源 |
|---|---|---|---|---|
| V2 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P | nvd@nist.gov |
EPSS
EPSS 评分
EPSS 百分位
漏洞利用信息
Exploit Database EDB-ID : 35209
发布日期 : 2014-11-09 23h00 +00:00
作者 : Pedro Ribeiro
EDB 已验证 : No
Exploit Database EDB-ID : 43896
发布日期 : 2014-11-08 23h00 +00:00
作者 : Pedro Ribeiro
EDB 已验证 : No
相关产品
配置 0
Zohocorp>>Manageengine_social_it_plus >> Version 11.0
配置 0
Zohocorp>>Manageengine_it360 >> Version 10.3.0
Zohocorp>>Manageengine_it360 >> Version 10.4
配置 0
Zohocorp>>Manageengine_opmanager >> Version 8.8
Zohocorp>>Manageengine_opmanager >> Version 9.0
Zohocorp>>Manageengine_opmanager >> Version 9.1
Zohocorp>>Manageengine_opmanager >> Version 9.2
Zohocorp>>Manageengine_opmanager >> Version 9.4
Zohocorp>>Manageengine_opmanager >> Version 10.0
Zohocorp>>Manageengine_opmanager >> Version 10.1
Zohocorp>>Manageengine_opmanager >> Version 10.2
Zohocorp>>Manageengine_opmanager >> Version 11.0
Zohocorp>>Manageengine_opmanager >> Version 11.1
Zohocorp>>Manageengine_opmanager >> Version 11.2
Zohocorp>>Manageengine_opmanager >> Version 11.3
Zohocorp>>Manageengine_opmanager >> Version 11.4
参考资料
Tags : x_refsource_MISC
Tags : mailing-list, x_refsource_BUGTRAQ
