Lucene search

K
nvd[email protected]NVD:CVE-2015-4666
HistoryAug 13, 2015 - 2:59 p.m.

CVE-2015-4666

2015-08-1314:59:05
CWE-22
web.nvd.nist.gov
5

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.012

Percentile

85.4%

Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attackers to read arbitrary files via a …// (quadruple dot double slash) in the logFile parameter.

Affected configurations

Nvd
Node
xceediumxsuiteMatch2.3.0
OR
xceediumxsuiteMatch2.4.3.0
VendorProductVersionCPE
xceediumxsuite2.3.0cpe:2.3:a:xceedium:xsuite:2.3.0:*:*:*:*:*:*:*
xceediumxsuite2.4.3.0cpe:2.3:a:xceedium:xsuite:2.4.3.0:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.012

Percentile

85.4%