NVD

Id
23734  
Name
CVE-2015-1398  
Description
Multiple directory traversal vulnerabilities in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote authenticated users to include and execute certain PHP files via (1) .. (dot dot) sequences in the PATH_INFO to index.php or (2) vectors involving a block value in the ___directive parameter to the Cms_Wysiwyg controller in the Adminhtml module, related to the blockDirective function and the auto loading mechanism. NOTE: vector 2 might not cross privilege boundaries, since administrators might already have the privileges to execute code and upload files.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-04-29  
Modified Date
2015-05-11  
Seq
2015-1398  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
126188 23734 CVE-2015-1398 http://blog.checkpoint.com/2015/04/20/analyzing-magento-vulnerability/  View
126189 23734 CVE-2015-1398 http://magento.com/blog/technical/critical-security-advisory-remote-code-execution-rce-vulnerability  View
126190 23734 CVE-2015-1398 1032194  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7199 JVNDB-2015-002519 Magento Community Edition および Enterprise Edition におけるディレクトリトラバーサルの脆弱性 Magento Community Edition (CE) および Enterprise Edition (EE) には、blockDirective 関数およびオートロードメカニズムに関する処理に不備があるため、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2015-1398 78623 CVE-2015-1398 23734 6.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002519.html 2015-02-09 2015-05-01 View