CVE-2017-2117

EPSS 2.1%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 2.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

28 abr 2017Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with administrator rights to read arbitrary files via unspecified vectors.

Produtos afetados

CubeCart Limited · CubeCart

Referências

http://jvn.jp/en/jp/JVN63474730/index.html https://forums.cubecart.com/topic/52188-cubecart-615-released/http://www.securityfocus.com/bid/96466