Lucene search

K
cve[email protected]CVE-2015-4068
HistoryMay 29, 2015 - 3:59 p.m.

CVE-2015-4068

2015-05-2915:59:23
CWE-22
web.nvd.nist.gov
843
In Wild
cve
2015
4068
directory traversal
vulnerability
arcserve
udp
remote attackers
sensitive information
denial of service

6.5 Medium

AI Score

Confidence

Low

9.4 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:N/A:C

0.974 High

EPSS

Percentile

99.9%

Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted file path to the (1) reportFileServlet or (2) exportServlet servlet.

Affected configurations

NVD
Node
arcservearcserve_unified_data_protectionRange5.03

6.5 Medium

AI Score

Confidence

Low

9.4 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:N/A:C

0.974 High

EPSS

Percentile

99.9%