CVE-2017-6527

An issue was discovered in dnaTools dnaLIMS 4-2015s13

published March 9, 2017

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.1th percentile for exploit probability.

CVSS
—
EPSS
57%
Percentile
99.1
In the wild
Unconfirmed
What it is

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to a NUL-terminated directory traversal attack allowing an unauthenticated attacker to access system files readable by the web server user (by using the viewAppletFsa.cgi seqID parameter).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.56647 · 99.1th percentile
Published
2017-03-09T19:00Z
EPSS history
Timeline
  • 09 MAR 19:00Z
    An issue was discovered in dnaTools dnaLIMS 4-2015s13
    cvelistv5