Lucene search

[email protected]CVE-2023-28382

HistoryMay 26, 2023 - 9:15 a.m.

CVE-2023-28382

2023-05-2609:15:38

CWE-22

[email protected]

web.nvd.nist.gov

cve-2023-28382

directory traversal

vulnerability

ess rec

agent server

linux

solaris

hp-ux

aix

nvd

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

7.9 High

AI Score

Confidence

High

5.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

29.6%

JSON

Directory traversal vulnerability in ESS REC Agent Server Edition series allows an authenticated attacker to view or alter an arbitrary file on the server. Affected products and versions are as follows: ESS REC Agent Server Edition for Linux V1.0.0 to V1.4.3, ESS REC Agent Server Edition for Solaris V1.1.0 to V1.4.0, ESS REC Agent Server Edition for HP-UX V1.1.0 to V1.4.0, and ESS REC Agent Server Edition for AIX V1.2.0 to V1.4.1

CPENameOperatorVersion
et-x:ess_recet-x ess recle1.4.3
et-x:ess_recet-x ess receq1.0.0
et-x:ess_recet-x ess receq1.4.3
et-x:ess_recet-x ess recle1.4.0
et-x:ess_recet-x ess receq1.4.0
et-x:ess_recet-x ess receq1.1.0
et-x:ess_recet-x ess recle1.4.1
et-x:ess_recet-x ess receq1.2.0
et-x:ess_recet-x ess receq1.4.1

CPE	Name	Operator	Version
et-x:ess_rec	et-x ess rec	le	1.4.3
et-x:ess_rec	et-x ess rec	eq	1.0.0
et-x:ess_rec	et-x ess rec	eq	1.4.3
et-x:ess_rec	et-x ess rec	le	1.4.0
et-x:ess_rec	et-x ess rec	eq	1.4.0
et-x:ess_rec	et-x ess rec	eq	1.1.0
et-x:ess_rec	et-x ess rec	le	1.4.1
et-x:ess_rec	et-x ess rec	eq	1.2.0
et-x:ess_rec	et-x ess rec	eq	1.4.1

References

customer.et-x.jp/app/answers/detail/a_id/2260

jvn.jp/en/jp/JVN19243534/

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

7.9 High

AI Score

Confidence

High

5.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

29.6%

JSON

Related for CVE-2023-28382

jvn1 prion1