Lucene search

INCDCVE-2023-31179

HistoryMay 08, 2023 - 9:15 p.m.

CVE-2023-31179

2023-05-0821:15:11

CWE-22

INCD

web.nvd.nist.gov

cve-2023-31179

agilepoint nx

v8.0

path traversal

vulnerability

server

file download

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

40.8%

JSON

AgilePoint NX v8.0 SU2.2 & SU2.3 - Path traversal - Vulnerability allows path traversal and downloading files from the server, by an unspecified request.

Affected configurations

Nvd

Node

agilepointagilepoint_nxMatch8.0su2.2

agilepointagilepoint_nxMatch8.0su2.3

VendorProductVersionCPE
agilepointagilepoint_nx8.0cpe:2.3:a:agilepoint:agilepoint_nx:8.0:su2.2:*:*:*:*:*:*
agilepointagilepoint_nx8.0cpe:2.3:a:agilepoint:agilepoint_nx:8.0:su2.3:*:*:*:*:*:*

Vendor	Product	Version	CPE
agilepoint	agilepoint_nx	8.0	cpe:2.3:a:agilepoint:agilepoint_nx:8.0:su2.2::::::
agilepoint	agilepoint_nx	8.0	cpe:2.3:a:agilepoint:agilepoint_nx:8.0:su2.3::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "NX",
    "vendor": "AgilePoint",
    "versions": [
      {
        "lessThan": "v8.0 SU2.4",
        "status": "affected",
        "version": "v8.0 SU2.2 & SU2.3",
        "versionType": "custom"
      }
    ]
  }
]

References

www.gov.il/en/Departments/faq/cve_advisories

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

40.8%

JSON

Related for CVE-2023-31179