CVE-2012-4957
Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with…
published November 18, 2012
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.3th percentile for exploit probability.
What it is
Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an SRS record.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.67620 · 99.3th percentile
- Published
- 2012-11-18T19:00Z
EPSS history
Timeline