CVE-2018-1306

{"id": "CVE-2018-1306", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2018-06-27T18:29:00.553", "references": [{"url": "http://portals.apache.org/pluto/security.html", "tags": ["Mitigation", "Vendor Advisory"], "source": "security@apache.org"}, {"url": "https://www.exploit-db.com/exploits/45396/", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "security@apache.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict path information provided during a file upload. An attacker could exploit this vulnerability to obtain configuration data and other sensitive information."}, {"lang": "es", "value": "El c\u00f3digo del archivo war Multipart Portlet PortletV3AnnotatedDemo proporcionado en Apache Pluto 3.0.0 podr\u00eda permitir que un atacante remoto obtenga informaci\u00f3n sensible. Esto viene provocado por un error al restringir la informaci\u00f3n de ruta proporcionada durante una subida de archivo. Un atacante podr\u00eda explotar esta vulnerabilidad para obtener datos de configuraci\u00f3n y otro tipo de informaci\u00f3n sensible."}], "lastModified": "2019-03-01T19:52:58.733", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apache:pluto:3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31F6CCD7-D29C-4C90-9229-8D34DC721208"}], "operator": "OR"}]}], "sourceIdentifier": "security@apache.org"}