Lucene search
HistoryDec 02, 2014 - 4:59 p.m.
CVE-2014-8789
cve-2014-8789
gleamtech filevista
file creation
code execution
zip archive
security vulnerability
nvd
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.6%
GleamTech FileVista before 6.1 allows remote authenticated users to create arbitrary files and possibly execute arbitrary code via a crafted path in a zip archive, which is not properly handled during extraction.
Affected configurations
Node
gleamtechfilevistaRange≤6.0.9
| CPE | Name | Operator | Version |
|---|---|---|---|
| gleamtech:filevista | gleamtech filevista | le | 6.0.9 |
Related
prion
prion
Code injection
2014-12-02 16:59:00
nvd
nvd
CVE-2014-8789
2014-12-02 16:59:03
cvelist
cvelist
CVE-2014-8789
2014-12-02 16:00:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.6%
Related for CVE-2014-8789