NVD

Id
27372  
Name
CVE-2015-6459  
Description
Absolute path traversal vulnerability in the download feature in FileDownloadServlet in GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 allows remote attackers to read or delete arbitrary files via a full pathname.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-09-18  
Modified Date
2015-09-23  
Seq
2015-6459  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
143967 27372 CVE-2015-6459 http://www.gedigitalenergy.com/app/resources.aspx?prod=pulsenet&type=9  View
143968 27372 CVE-2015-6459 http://zerodayinitiative.com/advisories/ZDI-15-439/  View
143969 27372 CVE-2015-6459 https://ics-cert.us-cert.gov/advisories/ICSA-15-258-03  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9605 JVNDB-2015-004925 GE Digital Energy MDS PulseNET および MDS PulseNET Enterprise の FileDownloadServlet における絶対パストラバーサルの脆弱性 GE Digital Energy MDS PulseNET および MDS PulseNET Enterprise の FileDownloadServlet のダウンロード機能には、絶対パストラバーサルの脆弱性が存在します。 CVE-2015-6459 83684 CVE-2015-6459 27372 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004925.html 2015-09-15 2015-09-29 View