CVE-2017-7433

An absolute path traversal vulnerability (CWE-36) in Micro Focus Vibe 4.0.2 and earlier allows a remote authenticated attacker to download arbitrary files from…

published May 18, 2017

CVSS
—
EPSS
1%
Percentile
72.1
In the wild
Unconfirmed
What it is

An absolute path traversal vulnerability (CWE-36) in Micro Focus Vibe 4.0.2 and earlier allows a remote authenticated attacker to download arbitrary files from the server by submitting a specially crafted request to the viewFile endpoint. Note that the attack can be performed without authentication if Guest access is enabled (Guest access is disabled by default).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01398 · 72.1th percentile
Published
2017-05-18T14:00Z
EPSS history
Timeline
  • 18 MAY 14:00Z
    An absolute path traversal vulnerability (CWE-36) in Micro Focus Vibe 4.0.2 and earlier allows a remote authenticated attacker to download arbitrary files from…
    cvelistv5