Lucene search

PRIOn knowledge basePRION:CVE-2014-2858

HistoryApr 15, 2014 - 11:55 p.m.

Directory traversal

2014-04-1523:55:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

70.3%

JSON

Directory traversal vulnerability in the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 through 2.3.6 allows remote attackers to obtain sensitive information via unspecified vectors related to a “configured block.” NOTE: this issue was SPLIT from CVE-2014-0053 per ADT2 due to different vulnerability types.

CPENameOperatorVersion
grailseq2.0.0
grailseq2.0.1
grailseq2.0.2
grailseq2.0.3
grailseq2.0.4
grailseq2.1.0
grailseq2.1.1
grailseq2.1.2
grailseq2.1.3
grailseq2.1.4

Name	Operator	Version
grails	eq	2.0.0
grails	eq	2.0.1
grails	eq	2.0.2
grails	eq	2.0.3
grails	eq	2.0.4
grails	eq	2.1.0
grails	eq	2.1.1
grails	eq	2.1.2
grails	eq	2.1.3
grails	eq	2.1.4

Rows per page:

1-10 of 381

References

archives.neohapsis.com/archives/fulldisclosure/2014-02/0267.html

www.gopivotal.com/security/cve-2014-0053

www.securityfocus.com/archive/1/531281/100/0/threaded

6.3 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

70.3%

JSON

Related for PRION:CVE-2014-2858