Lucene search

K
cve[email protected]CVE-2013-3626
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-3626

2022-10-0316:14:45
CWE-22
web.nvd.nist.gov
14
cve-2013-3626
directory traversal
attachmate verastream host integrator
security vulnerability
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.2%

Directory traversal vulnerability in the Session Server in Attachmate Verastream Host Integrator (VHI) 6.0 through 7.5 SP 1 HF 1 allows remote attackers to upload and execute arbitrary files via a crafted message.

Affected configurations

NVD
Node
attachmateverastream_host_integratorMatch6.0
OR
attachmateverastream_host_integratorMatch6.5
OR
attachmateverastream_host_integratorMatch6.6
OR
attachmateverastream_host_integratorMatch7.0
OR
attachmateverastream_host_integratorMatch7.1
OR
attachmateverastream_host_integratorMatch7.5
OR
attachmateverastream_host_integratorMatch7.5sp1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.2%

Related for CVE-2013-3626