Lucene search
HistorySep 24, 2013 - 10:35 a.m.
CVE-2013-5221
cve-2013-5221
esri arcgis for server
mobile upload
security vulnerability
remote authentication
file upload
.exe files
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
31.8%
The mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated users to upload .exe files by leveraging (1) publisher or (2) administrator privileges.
Affected configurations
Node
esriarcgisMatch10.1
OResriarcgisMatch10.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| esri:arcgis | esri arcgis | eq | 10.1 |
| esri:arcgis | esri arcgis | eq | 10.2 |
Related
cvelist
cvelist
CVE-2013-5221
2013-09-24 10:00:00
nvd
nvd
CVE-2013-5221
2013-09-24 10:35:52
prion
prion
Unrestricted file upload
2013-09-24 10:35:00
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
31.8%
Related for CVE-2013-5221