Lucene search

IntelCVE-2013-7462

HistoryMar 14, 2017 - 10:59 p.m.

CVE-2013-7462

2017-03-1422:59:00

CWE-22

intel

web.nvd.nist.gov

cve-2013-7462

directory traversal

web application

mcafee

intel security

saas control console

scc

patch

exploit

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

57.7%

JSON

A directory traversal vulnerability in the web application in McAfee (now Intel Security) SaaS Control Console (SCC) Platform 6.14 before patch 1070, and 6.15 before patch 1076 allows unauthenticated users to view contents of arbitrary system files that did not have file system level read access restrictions via a null-byte injection exploit.

Affected configurations

Nvd

Vulners

Node

mcafeesaas_control_console_platformRange≤6.15

VendorProductVersionCPE
mcafeesaas_control_console_platform*cpe:2.3:a:mcafee:saas_control_console_platform:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mcafee	saas_control_console_platform	*	cpe:2.3:a:mcafee:saas_control_console_platform::::::::

CNA Affected

[
  {
    "product": "SaaS Control Console (SCC) Platform",
    "vendor": "Intel",
    "versions": [
      {
        "status": "affected",
        "version": "6.14 before patch 1070, and 6.15 before patch 1076"
      }
    ]
  }
]

References

kc.mcafee.com/corporate/index?page=content&id=SB10056

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

57.7%

JSON

Related for CVE-2013-7462