Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-36356
HistoryAug 31, 2021 - 4:15 a.m.

Information disclosure

2021-08-3104:15:00
PRIOn knowledge base
www.prio-n.com
5

9.9 High

AI Score

Confidence

High

0.881 High

EPSS

Percentile

98.7%

KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable pathnames (even though browseSystemFiles.php is no longer reachable via the GUI). NOTE: this issue exists because of an incomplete fix for CVE-2019-17124.

CPENameOperatorVersion
viawareeq<= 2021-8

9.9 High

AI Score

Confidence

High

0.881 High

EPSS

Percentile

98.7%