CVE-2017-9447 in Remote Application Serverinfo

Zusammenfassung

von MITRE

In the web interface of Parallels Remote Application Server (RAS) 15.5 Build 16140, a vulnerability exists due to improper validation of the file path when requesting a resource under the "RASHTML5Gateway" directory. A remote, unauthenticated attacker could exploit this weakness to read arbitrary files from the vulnerable system using path traversal sequences.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservieren

05.06.2017

Veröffentlichung

28.02.2018

Moderieren

akzeptiert

Eintrag

VDB-113943

CPE

bereit

Exploit

Download

EPSS

0.00694

KEV

nein

Aktivitäten

very low

Quellen

Do you know our Splunk app?

Download it now for free!