CVE-2024-47563CWE-22

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)

Medium · published October 8, 2024

CVSS v4.0
6.9
EPSS
1%
Percentile
45.0
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate a file path that is supplied to an endpoint intended to create CSR files.

This could allow an unauthenticated remote attacker to create files in writable directories outside the intended location and thus compromise integrity of files in those writable directories.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00547 · 45.0th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2024-10-08T08:40Z
EPSS history
Timeline
  • 08 OCT 08:40Z
    A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0)
    cvelistv5