Directory Traversal Vulnerability in Seagate NAS OS
CVE-2018-12298

7.5HIGH

Key Information:

Vendor

Seagate

Status
Nas Os
Vendor
CVE Published:
13 May 2019

What is CVE-2018-12298?

A directory traversal vulnerability exists in the filebrowser component of Seagate NAS OS 4.3.15.1, enabling attackers to bypass security restrictions and access files outside the intended directory structure. By crafting a malicious URL, attackers can exploit this flaw to read sensitive files from within the application’s container, potentially compromising the integrity and privacy of user data.

References

https://blog.securityevaluators.com/invading-your-persona...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.