NVD

Id
20938  
Name
CVE-2016-5765  
Description
Administrative Server in Micro Focus Host Access Management and Security Server (MSS) and Reflection for the Web (RWeb) and Reflection Security Gateway (RSG) and Reflection ZFE (ZFE) allows remote unauthenticated attackers to read arbitrary files via a specially crafted URL that allows limited directory traversal. Applies to MSS 12.3 before 12.3.326 and MSS 12.2 before 12.2.342 and RSG 12.1 before 12.1.362 and RWeb 12.3 before 12.3.312 and RWeb 12.2 before 12.2.342 and RWeb 12.1 before 12.1.362 and ZFE 2.0.1 before 2.0.1.18 and ZFE 2.0.0 before 2.0.0.52 and ZFE 1.4.0 before 1.4.0.14.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-11-29  
Modified Date
2016-12-23  
Seq
2016-5765  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
114056 20938 CVE-2016-5765 http://support.attachmate.com/techdocs/1704.html  View
114057 20938 CVE-2016-5765 94579  View
114058 20938 CVE-2016-5765 http://www.zerodayinitiative.com/advisories/ZDI-16-618  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5272 JVNDB-2016-006045 複数の Micro Focus 製品の管理サーバにおける任意のファイルを読まれる脆弱性 Micro Focus Host Access Management and Security Server (MSS)、Reflection for the Web (RWeb)、Reflection Security Gateway (RSG) および Reflection ZFE (ZFE) の管理サーバには、任意のファイルを読まれる脆弱性が存在します。 CVE-2016-5765 92271 CVE-2016-5765 20938 4.3 6.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006045.html 2016-11-28 2016-12-01 View