Lucene search

[email protected]CVE-2015-8276

HistoryApr 10, 2017 - 3:59 a.m.

CVE-2015-8276

2017-04-1003:59:01

CWE-200

[email protected]

web.nvd.nist.gov

cve-2015-8276

lvrtc

eparakstitajs

edoc libraries

security vulnerability

file reading vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.7%

JSON

LVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01 allow attackers to read arbitrary files via crafted EDOC files.

Affected configurations

NVD

Node

eparakstsedoc-librariesMatch2.5.4_01

eparakstseparakstitajs_3Match1.3.0

CPENameOperatorVersion
eparaksts:edoc-librarieseparaksts edoc-librarieseq2.5.4_01
eparaksts:eparakstitajs_3eparaksts eparakstitajs 3eq1.3.0

CPE	Name	Operator	Version
eparaksts:edoc-libraries	eparaksts edoc-libraries	eq	2.5.4_01
eparaksts:eparakstitajs_3	eparaksts eparakstitajs 3	eq	1.3.0

CNA Affected

[
  {
    "product": "LVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "LVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01"
      }
    ]
  }
]

References

cert.lv/en/2016/01/new-cve-information-avialable

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.7%

JSON

Related for CVE-2015-8276

nvd1 prion1 cvelist1