Directory Traversal Vulnerability in Netsweeper Products
CVE-2014-9609

5.3MEDIUM

Key Information:

Vendor

Netsweeper

Status
Netsweeper
Vendor
CVE Published:
19 February 2020

What is CVE-2014-9609?

A directory traversal vulnerability exists in Netsweeper's webadmin interface, specifically within the view_server_log.php component. This flaw allows remote attackers to manipulate the log parameter and traverse directories by using a '..' sequence. As a result, unauthorized users may gain access to sensitive files and directory contents, posing significant security risks to the affected systems.

References

http://packetstormsecurity.com/files/133034/Netsweeper-By...
x_refsource_MISC

EPSS Score

12% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.