NVD

Id
31454  
Name
CVE-2014-3225  
Description
Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-05-13  
Modified Date
2014-05-16  
Seq
2014-3225  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
165016 31454 CVE-2014-3225 http://packetstormsecurity.com/files/126553/Cobbler-Local-File-Inclusion.html  View
165017 31454 CVE-2014-3225 [oss-security] 20140508 CVE Request - Local File inclusion in Cobbler  View
165018 31454 CVE-2014-3225 [oss-security] 20140508 Re: CVE Request - Local File inclusion in Cobbler  View
165019 31454 CVE-2014-3225 33252  View
165020 31454 CVE-2014-3225 20140513 FD - Cobbler Arbitrary File Read CVE-2014-3225  View
165021 31454 CVE-2014-3225 67277  View
165022 31454 CVE-2014-3225 https://github.com/cobbler/cobbler/issues/939  View
165023 31454 CVE-2014-3225 https://www.youtube.com/watch?v=vuBaoQUFEYQ&feature=youtu.be  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13627 JVNDB-2014-002502 Cobbler の Web インターフェースにおける絶対パストラバーサルの脆弱性 Cobbler の Web インターフェースには、絶対パストラバーサルの脆弱性が存在します。 CVE-2014-3225 70512 CVE-2014-3225 31454 4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002502.html 2014-05-08 2014-05-16 View