Lucene search
HistoryNov 04, 2015 - 3:59 a.m.
CVE-2015-7253
commvault
edge server
security
vulnerability
cve-2015-7253
nvd
7.7 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.004 Low
EPSS
Percentile
73.6%
The Web Console in Commvault Edge Server 10 R2 allows remote attackers to execute arbitrary OS commands via crafted serialized data in a cookie.
| CPE | Name | Operator | Version |
|---|---|---|---|
| commvault:edge_server | commvault edge server | eq | 10 |
References
Related
prion
prion
Design/Logic Flaw
2015-11-04 03:59:00
cert
cert
Commvault Edge Server deserializes cookie data insecurely
2015-11-03 00:00:00
impervablog
impervablog
Deserialization Attacks Surge Motivated by Illegal Crypto-mining
2018-01-24 17:45:08
7.7 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.004 Low
EPSS
Percentile
73.6%
Related for CVE-2015-7253