CVE-2018-18777

Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subpage) allows remote authenticated users…

published November 1, 2018

CVSS
—
EPSS
23%
Percentile
97.7
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subpage) allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. (slash dot dot) in a pathname used by a web application. NOTE: this is a deprecated product.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.22768 · 97.7th percentile
Published
2018-11-01T17:00Z
EPSS history
Timeline
  • 01 NOV 17:00Z
    Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subpage) allows remote authenticated users…
    cvelistv5