Lucene search
HistoryMay 20, 2014 - 11:13 a.m.
CVE-2014-3460
netiq sentinel
nqmcsvarset
cve-2014-3460
directory traversal
activex control
remote attack
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.274 Low
EPSS
Percentile
96.8%
Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in Agent Manager in NetIQ Sentinel allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted pathname.
Affected configurations
Node
microfocussentinelMatch-
ORmicrofocussentinel_agent_managerMatch-
Related
zdi
zdi
prion
prion
Directory traversal
2014-05-20 11:13:00
Directory traversal
2014-07-07 11:01:00
nessus
nessus
cvelist
cvelist
CVE-2014-3460
2014-05-20 10:00:00
CVE-2014-0602
2014-07-07 10:00:00
nvd
nvd
CVE-2014-3460
2014-05-20 11:13:38
CVE-2014-0602
2014-07-07 11:01:28
cve
cve
CVE-2014-0602
2014-07-07 11:01:28
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.274 Low
EPSS
Percentile
96.8%
Related for CVE-2014-3460