CVE-2014-3225

{"id": "CVE-2014-3225", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-05-14T00:55:11.057", "references": [{"url": "http://packetstormsecurity.com/files/126553/Cobbler-Local-File-Inclusion.html", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://seclists.org/oss-sec/2014/q2/273", "source": "cve@mitre.org"}, {"url": "http://seclists.org/oss-sec/2014/q2/274", "source": "cve@mitre.org"}, {"url": "http://www.exploit-db.com/exploits/33252", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/106759", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/532094/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/67277", "source": "cve@mitre.org"}, {"url": "https://github.com/cobbler/cobbler/issues/939", "source": "cve@mitre.org"}, {"url": "https://www.youtube.com/watch?v=vuBaoQUFEYQ&feature=youtu.be", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://packetstormsecurity.com/files/126553/Cobbler-Local-File-Inclusion.html", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/oss-sec/2014/q2/273", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/oss-sec/2014/q2/274", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.exploit-db.com/exploits/33252", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/106759", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/532094/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/67277", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/cobbler/cobbler/issues/939", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.youtube.com/watch?v=vuBaoQUFEYQ&feature=youtu.be", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile."}, {"lang": "es", "value": "Vulnerabilidad de recorrido de directorio absoluto en la interfaz web en Cobbler 2.4.x hasta 2.6.x permite a usuarios remotos autenticados leer archivos arbitrarios a trav\u00e9s del campo Kickstart en un perfil."}], "lastModified": "2024-11-21T02:07:43.063", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cobblerd:cobbler:2.4.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77E45FEE-77FD-4E38-A437-530DB0FB0726"}, {"criteria": "cpe:2.3:a:cobblerd:cobbler:2.4.0:1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0875D8D3-9421-4E74-AC82-00F444971EFC"}, {"criteria": "cpe:2.3:a:cobblerd:cobbler:2.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A83D8CA5-9B9D-4BFF-8DBF-4EFD79AA9485"}, {"criteria": "cpe:2.3:a:cobblerd:cobbler:2.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B202661-286F-45BD-9402-BF744AD23521"}, {"criteria": "cpe:2.3:a:cobblerd:cobbler:2.4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DCAB8299-192E-45A3-96DA-A2D047A30639"}, {"criteria": "cpe:2.3:a:cobblerd:cobbler:2.4.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C55580F-7FA7-445C-AC12-FC145C5EBF1E"}, {"criteria": "cpe:2.3:a:cobblerd:cobbler:2.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF231D52-CB23-4312-80E0-B4E3A0AB69DA"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}