CVE-2014-9181 in Plex Media Server

Résumé (Anglaise)

Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote attackers to read arbitrary files via a .. (dot dot) in the URI to (1) manage/ or (2) web/ or remote authenticated users to read arbitrary files via a .. (dot dot) in the URI to resources/.

Réserver

02/12/2014

Divulgation

02/12/2014

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
73063	Plex Media Server directory traversal	22	Preuve de concept	Correctif officiel	CVE-2014-9181
12521	Plex Media Server manage directory traversal	22	Preuve de concept	Correctif officiel	CVE-2014-9181
12520	Plex Media Server Authentication proxy directory traversal	22	Preuve de concept	Correctif officiel	CVE-2014-9181