CVE-2023-4475CWE-552

An Arbitrary File Movement vulnerability was found on the ADM

High · published August 22, 2023

CVSS v3.1
7.5
EPSS
0%
Percentile
6.6
In the wild
Unconfirmed
What it is

An Arbitrary File Movement vulnerability was found in ASUSTOR Data Master (ADM) allows an attacker to exploit the file renaming feature to move files to unintended directories. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00175 · 6.6th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2023-08-22T09:02Z
EPSS history
Timeline
  • 22 AUG 09:02Z
    An Arbitrary File Movement vulnerability was found on the ADM
    cvelistv5