Lucene search

K
nvd[email protected]NVD:CVE-2013-3508
HistoryMay 08, 2013 - 12:09 p.m.

CVE-2013-3508

2013-05-0812:09:33
CWE-94
web.nvd.nist.gov
2

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

68.8%

html/System-Files.php in the System File Overview feature in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands via vectors involving file editing.

Affected configurations

Nvd
Node
gwosgroundwork_monitorMatch6.7.0-enterprise
VendorProductVersionCPE
gwosgroundwork_monitor6.7.0cpe:2.3:a:gwos:groundwork_monitor:6.7.0:-:enterprise:*:*:*:*:*

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

68.8%

Related for NVD:CVE-2013-3508