Lucene search

K
jvnJapan Vulnerability NotesJVN:52197991
HistoryJan 18, 2013 - 12:00 a.m.

JVN#52197991: Documents Pro (formerly Files HD) vulnerable to directory traversal

2013-01-1800:00:00
Japan Vulnerability Notes
jvn.jp
32

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.008

Percentile

81.3%

Documents Pro provided by Olive Toast Software Ltd. is a document viewer for iOS devices. Documents Pro contains a directory traversal vulnerability.

Impact

A guest user may view, delete or perform other actions on files that it does not have privileges to.

Solution

Update the software
Update to the latest version through the App Store.

Products Affected

  • Documents Pro versions prior to 1.11.1

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.008

Percentile

81.3%

Related for JVN:52197991