Lucene search
JpcertCVE-2015-2971HistoryJul 19, 2015 - 10:59 a.m.
CVE-2015-2971
2015-07-1910:59:00
CWE-22
jpcert
web.nvd.nist.gov
22
cve-2015-2971
directory traversal
seeds
acmailer
remote authenticated users
file deletion
crafted string
CVSS2
5.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:P/A:P
AI Score
6.5
Confidence
Low
EPSS
0.001
Percentile
49.6%
Directory traversal vulnerability in Seeds acmailer before 3.8.18 and 3.9.x before 3.9.12 Beta allows remote authenticated users to delete arbitrary files via a crafted string.
Affected configurations
Node
seedsacmailerRange<3.8.18
ORseedsacmailerMatch3.9.0beta
ORseedsacmailerMatch3.9.1beta
ORseedsacmailerMatch3.9.2beta
ORseedsacmailerMatch3.9.3beta
ORseedsacmailerMatch3.9.4beta
ORseedsacmailerMatch3.9.5beta
ORseedsacmailerMatch3.9.6beta
ORseedsacmailerMatch3.9.7beta
ORseedsacmailerMatch3.9.8beta
ORseedsacmailerMatch3.9.9beta
ORseedsacmailerMatch3.9.10beta
ORseedsacmailerMatch3.9.11beta
| Vendor | Product | Version | CPE |
|---|---|---|---|
| seeds | acmailer | * | cpe:2.3:a:seeds:acmailer:*:*:*:*:*:*:*:* |
| seeds | acmailer | 3.9.0 | cpe:2.3:a:seeds:acmailer:3.9.0:beta:*:*:*:*:*:* |
| seeds | acmailer | 3.9.1 | cpe:2.3:a:seeds:acmailer:3.9.1:beta:*:*:*:*:*:* |
| seeds | acmailer | 3.9.2 | cpe:2.3:a:seeds:acmailer:3.9.2:beta:*:*:*:*:*:* |
| seeds | acmailer | 3.9.3 | cpe:2.3:a:seeds:acmailer:3.9.3:beta:*:*:*:*:*:* |
| seeds | acmailer | 3.9.4 | cpe:2.3:a:seeds:acmailer:3.9.4:beta:*:*:*:*:*:* |
| seeds | acmailer | 3.9.5 | cpe:2.3:a:seeds:acmailer:3.9.5:beta:*:*:*:*:*:* |
| seeds | acmailer | 3.9.6 | cpe:2.3:a:seeds:acmailer:3.9.6:beta:*:*:*:*:*:* |
| seeds | acmailer | 3.9.7 | cpe:2.3:a:seeds:acmailer:3.9.7:beta:*:*:*:*:*:* |
| seeds | acmailer | 3.9.8 | cpe:2.3:a:seeds:acmailer:3.9.8:beta:*:*:*:*:*:* |
Related
jvn
jvn
JVN#64051989: acmailer vulnerable to directory traversal
2015-07-15 00:00:00
nvd
nvd
CVE-2015-2971
2015-07-19 10:59:00
prion
prion
Directory traversal
2015-07-19 10:59:00
cvelist
cvelist
CVE-2015-2971
2015-07-19 10:00:00
CVSS2
5.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:P/A:P
AI Score
6.5
Confidence
Low
EPSS
0.001
Percentile
49.6%
Related for CVE-2015-2971