NVD

Id
30982  
Name
CVE-2014-2588  
Description
Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the reportFileName parameter.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-03-24  
Modified Date
2014-04-01  
Seq
2014-2588  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
162902 30982 CVE-2014-2588 http://packetstormsecurity.com/files/125775/McAfee-Cloud-SSO-Asset-Manager-Issues.html  View
162903 30982 CVE-2014-2588 20140318 McAfee Cloud SSO and McAfee Asset Manager vulns  View
162904 30982 CVE-2014-2588 32368  View
162905 30982 CVE-2014-2588 66302  View
162906 30982 CVE-2014-2588 1029927  View
162907 30982 CVE-2014-2588 mcafee-asset-dir-traversal(91930)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12900 JVNDB-2014-001775 McAfee Asset Manager の servlet/downloadReport におけるディレクトリトラバーサルの脆弱性 McAfee Asset Manager の servlet/downloadReport には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2014-2588 69875 CVE-2014-2588 30982 4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001775.html 2014-03-18 2014-03-25 View