Lucene search
MitreCVE-2020-13377HistoryMay 12, 2023 - 11:15 a.m.
CVE-2020-13377
2023-05-1211:15:12
CWE-22
mitre
web.nvd.nist.gov
15
cve-2020-13377
loadbalancer.org
directory traversal
web-services
security vulnerability
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
AI Score
7.8
Confidence
High
EPSS
0.002
Percentile
55.8%
The web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an authenticated, remote, low-privileged attacker to conduct directory traversal attacks and obtain read and write access to sensitive files.
Affected configurations
Node
loadbalancerenterprise_va_maxRange≤8.3.8
| Vendor | Product | Version | CPE |
|---|---|---|---|
| loadbalancer | enterprise_va_max | * | cpe:2.3:a:loadbalancer:enterprise_va_max:*:*:*:*:*:*:*:* |
Related
prion
prion
Directory traversal
2023-05-12 11:15:00
nvd
nvd
CVE-2020-13377
2023-05-12 11:15:12
cvelist
cvelist
CVE-2020-13377
2023-05-12 00:00:00
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
AI Score
7.8
Confidence
High
EPSS
0.002
Percentile
55.8%
Related for CVE-2020-13377