| ID | 
        
          CVE-2014-3806
         | 
      
      
          | Sažetak | 
        Directory traversal vulnerability in cgi-bin/help/doIt.cgi in VMTurbo Operations Manager before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the xml_path parameter. | 
      
      
          | Reference | 
        
          
         | 
      
      
        | CVSS | 
        
          
              | Base:           | 5.0 |  
              | Impact:         | 2.9 |  
              | Exploitability: | 10.0 |  
           
         | 
      
    
        | Pristup | 
        
        
            | Vektor | Složenost | Autentikacija |  
            
            | NETWORK | 
            LOW | 
            NONE | 
             
         
         | 
    
      
        | Impact | 
        
        
            | Povjerljivost | Cjelovitost | Dostupnost |  
            
            | PARTIAL | 
            NONE | 
            NONE | 
             
         
         | 
    
    
        | CVSS vektor | 
        AV:N/AC:L/Au:N/C:P/I:N/A:N | 
      
      
          | Zadnje važnije ažuriranje | 
          
            09-10-2018 - 19:47 | 
          
      
      
          | Objavljeno | 
          
            21-05-2014 - 14:55 |