Lucene search
MitreCVELIST:CVE-2014-5350HistoryOct 03, 2022 - 4:20 p.m.
CVE-2014-5350
2022-10-0316:20:42
mitre
www.cve.org
bitdefender gravityzone
directory traversal
vulnerabilities
remote attackers
file read
web console
update server
Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) … (dot dot) in the id parameter to webservice/CORE/downloadFullKitEpc/a/1 in the Web Console or (2) %2E%2E (encoded dot dot) in the default URI to port 7074 on the Update Server.
References
seclists.org/fulldisclosure/2014/Jul/78
www.bitdefender.com/support/how-to-configure-iptables-firewall-rules-on-gravityzone-for-restricting-outside-access-to-mongodatabase-1265.html
www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140716-3_Bitdefender_GravityZone_Multiple_critical_vulnerabilities_v10.txt
Related
nessus
nessus
Bitdefender GravityZone < 5.1.11.432 Information Disclosure
2014-07-25 00:00:00
openvas
openvas
BitDefender Products HTTP Daemon Directory Traversal Vulnerability
2014-07-17 00:00:00
prion
prion
Directory traversal
2014-08-19 19:55:00
cve
cve
CVE-2014-5350
2022-10-03 16:20:42
nvd
nvd
CVE-2014-5350
2014-08-19 19:55:05