Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-0600
HistoryAug 29, 2014 - 9:55 a.m.

CVE-2014-0600

2014-08-2909:55:00
CWE-200
[email protected]
web.nvd.nist.gov
56
novell groupwise
administration service
fileuploadservlet
cve-2014-0600
zdi-can-2287
nvd

6.9 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.771 High

EPSS

Percentile

98.2%

JSON

FileUploadServlet in the Administration service in Novell GroupWise 2014 before SP1 allows remote attackers to read or write to arbitrary files via the poLibMaintenanceFileSave parameter, aka ZDI-CAN-2287.

CPENameOperatorVersion
novell:groupwisenovell groupwiseeq2014

Related

zdi 1
checkpoint_advisories 1
openvas 1
prion 1
nessus 1
zdi
zdi
Novell Groupwise Administration Server FileUploadServlet poLibMaintenanceFileSave Information Disclosure Vulnerability
2014-08-26 00:00:00
checkpoint_advisories
checkpoint_advisories
Novell GroupWise Admin Service FileUploadServlet Directory Traversal (CVE-2014-0600)
2014-10-02 00:00:00
openvas
openvas
Novell Groupwise 2014 < 2014 SP1 File Access Vulnerability - Active Check
2014-09-03 00:00:00
prion
prion
Code injection
2014-08-29 09:55:00
nessus
nessus
Novell GroupWise 'FileUploadServlet' Arbitrary File Access Vulnerability
2014-09-02 00:00:00

6.9 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.771 High

EPSS

Percentile

98.2%

JSON
Related for CVE-2014-0600
zdi1checkpoint_advisories1openvas1prion1nessus1