CVE-2022-34365CWE-22

WMS 3.7 contains a Path Traversal Vulnerability in Device API

Medium · published August 10, 2022

CVSS v3.1
6.5
EPSS
1%
Percentile
57.5
In the wild
Unconfirmed
What it is

WMS 3.7 contains a Path Traversal Vulnerability in Device API. An attacker could potentially exploit this vulnerability, to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00843 · 57.5th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2022-08-10T16:31Z
EPSS history
Timeline
  • 10 AUG 16:31Z
    WMS 3.7 contains a Path Traversal Vulnerability in Device API
    cvelistv5