NVD

Id
85470  
Name
CVE-2017-6564  
Description
On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest user, which contains the lowest privileges, can post to the idSourceFileName parameter found within the /download directory. This ability allows for an attacker to download sensitive system files from the host machine such as databases which contain information that can aid in further attacks.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-05-27  
Published
2017-05-01  
Modified Date
2017-05-12  
Seq
2017-6564  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
416695 85470 CVE-2016-8973 http://www.ibm.com/support/docview.wss?uid=swg21999960  View
416696 85470 CVE-2016-8973 96826  View
418792 85470 CVE-2017-5190 97965  View
418793 85470 CVE-2017-5190 https://www.novell.com/support/kb/doc.php?id=7018792  View
418794 85470 CVE-2017-5190 97965  View
418795 85470 CVE-2017-5190 https://www.novell.com/support/kb/doc.php?id=7018792  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
67419 JVNDB-2017-003716 Franklin Fueling Systems TS-550 evo デバイスにおけるアクセス制御に関する脆弱性 Franklin Fueling Systems TS-550 evo デバイスには、アクセス制御に関する脆弱性が存在します。 CVE-2017-6564 0 CVE-2017-6564 85470 4 6.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-003716.html 2017-05-02 2017-06-05 View