Lucene search
Team_tskH1:1280188HistoryJul 28, 2021 - 7:30 a.m.
U.S. Dept Of Defense: https://██████/ Vulnerable to CVE-2013-3827 (Directory-traversal vulnerability)
2021-07-2807:30:52
team_tsk
hackerone.com
207
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.734 High
EPSS
Percentile
97.7%
Description:
Hi team,
https://█████/ using older version of Oracle JavaServer which is vulnerable to CVE-2013-3827.
POC:
https://█████/████
References
https://www.securityfocus.com/bid/63052/info
https://www.exploit-db.com/exploits/38802
Impact
- Directory-traversal
System Host(s)
█████
Affected Product(s) and Version(s)
Oracle JavaServer
CVE Numbers
CVE-2013-3827
Steps to Reproduce
Go to https://██████████/██████
Suggested Mitigation/Remediation Actions
Update your Oracle JavaServer
Related
veracode
veracode
Directory Traversal
2017-03-28 04:33:28
prion
prion
Buffer overflow
2013-10-16 15:55:00
cvelist
cvelist
CVE-2013-3827
2013-10-16 15:00:00
cve
cve
CVE-2013-3827
2013-10-16 15:55:00
debiancve
debiancve
CVE-2013-3827
2013-10-16 15:55:00
nuclei
nuclei
Javafaces LFI
2021-06-30 10:50:41
hackerone
hackerone
Mail.ru: Path traversal on bank.mail.ru ( CVE-2013-3827 )
2020-07-15 15:19:18
osv
osv
Path Traversal in Eclipse Mojarra
2022-05-17 03:13:10
nessus
nessus
Oracle JavaServer Faces Multiple Partial Directory Traversals
2013-11-19 00:00:00
Oracle GlassFish Server Multiple Vulnerabilities (October 2013 CPU)
2013-10-17 00:00:00
github
github
Path Traversal in Eclipse Mojarra
2022-05-17 03:13:10
cert
cert
Oracle JavaServer Faces contains multiple vulnerabilities
2013-10-18 00:00:00
redhat
redhat
(RHSA-2014:0029) Important: Red Hat JBoss Data Grid 6.2.0 update
2014-01-15 17:38:16
securityvulns
securityvulns
oracle
oracle
Oracle Critical Patch Update - October 2013
2013-10-15 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.734 High
EPSS
Percentile
97.7%
Related for H1:1280188