Lucene search

K
jvnJapan Vulnerability NotesJVN:64051989
HistoryJul 15, 2015 - 12:00 a.m.

JVN#64051989: acmailer vulnerable to directory traversal

2015-07-1500:00:00
Japan Vulnerability Notes
jvn.jp
22

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

EPSS

0.001

Percentile

49.6%

acmailer provided by Seeds Co.,Ltd. contains a directory traversal (CWE-22) vulnerability.

Impact

An authenticated attacker may delete files on the server.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

  • acmailer versions prior to 3.8.18
  • acmailer versions prior to 3.9.12 Beta

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

EPSS

0.001

Percentile

49.6%

Related for JVN:64051989