CVE-2014-3460

2014-05-2011:13:38

CWE-22

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.343

Percentile

97.2%

JSON

Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in Agent Manager in NetIQ Sentinel allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted pathname.

Affected configurations

Nvd

Node

microfocussentinelMatch-

microfocussentinel_agent_managerMatch-

VendorProductVersionCPE
microfocussentinel-cpe:2.3:a:microfocus:sentinel:-:*:*:*:*:*:*:*
microfocussentinel_agent_manager-cpe:2.3:a:microfocus:sentinel_agent_manager:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microfocus	sentinel	-	cpe:2.3:a:microfocus:sentinel:-:::::::*
microfocus	sentinel_agent_manager	-	cpe:2.3:a:microfocus:sentinel_agent_manager:-:::::::*