CVE-2014-4507

2014-06-2014:00:00

mitre

www.cve.org

directory traversal

smart-proxy

remote attack

AI Score

6.8

Confidence

Low

EPSS

0.005

Percentile

75.8%

JSON

Directory traversal vulnerability in Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to overwrite arbitrary files via a … (dot dot) in the dst parameter to tftp/fetch_boot_file.

References

projects.theforeman.org/issues/6086