CVE-2018-15698 - CERT CVE

  1. CVE-2018-15698

ID CVE-2018-15698
Sažetak ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on the file system when providing the full path to loginimage.cgi.
Reference
CVSS
Base: 6.8
Impact: 6.9
Exploitability:8.0
Pristup
VektorSloženostAutentikacija
NETWORK LOW SINGLE
Impact
PovjerljivostCjelovitostDostupnost
COMPLETE NONE NONE
CVSS vektor AV:N/AC:L/Au:S/C:C/I:N/A:N
Zadnje važnije ažuriranje 30-10-2018 - 14:00
Objavljeno 27-08-2018 - 14:29