6.5

CVE-2017-14614

Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before 1.9.7, and 8.x before 8.1.5 allows remote authenticated users to read arbitrary files on remote cluster nodes via a crafted path.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gridgain ≫ Gridgain Version8.0.0 Updateea1
Gridgain ≫ Gridgain Version8.0.0 Updateea2
Gridgain ≫ Gridgain Version8.0.0 Updateea3
Gridgain ≫ Gridgain Version8.0.0 Updateea4
Gridgain ≫ Gridgain Version8.0.0 Updateea5
Gridgain ≫ Gridgain Version8.0.1
Gridgain ≫ Gridgain Version8.0.1 Updateea1
Gridgain ≫ Gridgain Version8.0.1 Updateea2
Gridgain ≫ Gridgain Version8.0.1 Updateea3
Gridgain ≫ Gridgain Version8.0.1 Updateea4
Gridgain ≫ Gridgain Version8.0.1 Updateea5
Gridgain ≫ Gridgain Version8.0.1 Updateea6
Gridgain ≫ Gridgain Version8.0.1 Updateea7
Gridgain ≫ Gridgain Version8.0.1 Updateea8
Gridgain ≫ Gridgain Version8.0.1 Updateea9
Gridgain ≫ Gridgain Version8.0.2 Updateea1
Gridgain ≫ Gridgain Version8.0.2 Updateea2
Gridgain ≫ Gridgain Version8.0.2 Updateea3
Gridgain ≫ Gridgain Version8.0.3 Updateea1
Gridgain ≫ Gridgain Version8.0.3 Updateea10
Gridgain ≫ Gridgain Version8.0.3 Updateea11
Gridgain ≫ Gridgain Version8.0.3 Updateea12
Gridgain ≫ Gridgain Version8.0.3 Updateea13
Gridgain ≫ Gridgain Version8.0.3 Updateea14
Gridgain ≫ Gridgain Version8.0.3 Updateea15
Gridgain ≫ Gridgain Version8.0.3 Updateea16
Gridgain ≫ Gridgain Version8.0.3 Updateea2
Gridgain ≫ Gridgain Version8.0.3 Updateea3
Gridgain ≫ Gridgain Version8.0.3 Updateea4
Gridgain ≫ Gridgain Version8.0.3 Updateea5
Gridgain ≫ Gridgain Version8.0.3 Updateea6
Gridgain ≫ Gridgain Version8.0.3 Updateea7
Gridgain ≫ Gridgain Version8.0.3 Updateea8
Gridgain ≫ Gridgain Version8.0.3 Updateea9
Gridgain ≫ Gridgain Version8.0.4 Updateea1
Gridgain ≫ Gridgain Version8.1.1
Gridgain ≫ Gridgain Version8.1.2
Gridgain ≫ Gridgain Version8.1.3
Gridgain ≫ Gridgain Version8.1.3 Updatep1
Gridgain ≫ Gridgain Version8.1.3 Updatep2
Gridgain ≫ Gridgain Version8.1.3 Updatep3
Gridgain ≫ Gridgain Version8.1.3 Updatep4
Gridgain ≫ Gridgain Version8.1.3 Updatep5
Gridgain ≫ Gridgain Version8.1.4
Gridgain ≫ Gridgain Version8.1.4 Updatep1
Gridgain ≫ Gridgain Version8.1.4 Updatep2
Gridgain ≫ Gridgain Version8.1.4 Updatep3
Gridgain ≫ Gridgain Version1.9.1
Gridgain ≫ Gridgain Version1.9.2
Gridgain ≫ Gridgain Version1.9.3
Gridgain ≫ Gridgain Version1.9.4
Gridgain ≫ Gridgain Version1.9.5
Gridgain ≫ Gridgain Version1.9.6
Gridgain ≫ Gridgain Version1.8.1
Gridgain ≫ Gridgain Version1.8.2
Gridgain ≫ Gridgain Version1.8.3
Gridgain ≫ Gridgain Version1.8.4
Gridgain ≫ Gridgain Version1.8.5
Gridgain ≫ Gridgain Version1.8.6
Gridgain ≫ Gridgain Version1.8.7
Gridgain ≫ Gridgain Version1.8.8
Gridgain ≫ Gridgain Version1.8.9
Gridgain ≫ Gridgain Version1.8.10
Gridgain ≫ Gridgain Version1.8.11
Gridgain ≫ Gridgain Version <= 1.7.15
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.49% 0.641
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.