Lucene search
HistoryMay 12, 2023 - 11:15 a.m.
CVE-2020-13377
loadbalancer.org
cve-2020-13377
vulnerability
directory traversal
web services
authenticated
remote
low-privileged
attacker
sensitive files
read access
write access
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
AI Score
8
Confidence
High
EPSS
0.002
Percentile
55.8%
The web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an authenticated, remote, low-privileged attacker to conduct directory traversal attacks and obtain read and write access to sensitive files.
Affected configurations
Node
loadbalancerenterprise_va_maxRange≤8.3.8
| Vendor | Product | Version | CPE |
|---|---|---|---|
| loadbalancer | enterprise_va_max | * | cpe:2.3:a:loadbalancer:enterprise_va_max:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2020-13377
2023-05-12 11:15:12
prion
prion
Directory traversal
2023-05-12 11:15:00
cvelist
cvelist
CVE-2020-13377
2023-05-12 00:00:00
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
AI Score
8
Confidence
High
EPSS
0.002
Percentile
55.8%
Related for NVD:CVE-2020-13377