Vulnerability Details CVE-2014-3702
Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently cause a denial of service (resource consumption) via a .. (dot dot) the session parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 77.5%
CVSS Severity
CVSS v3 Score 9.1
CVSS v2 Score 6.4
References
Products affected by CVE-2014-3702
-
cpe:2.3:a:redhat:edeploy:0.1.0
-
cpe:2.3:a:redhat:edeploy:0.2.0
-
cpe:2.3:a:redhat:edeploy:1.4.0
-
cpe:2.3:a:redhat:edeploy:1.5.0
-
cpe:2.3:a:redhat:edeploy:h.1.0.0
-
cpe:2.3:a:redhat:edeploy:h.1.1.0
-
cpe:2.3:a:redhat:edeploy:h.1.2.0
-
cpe:2.3:a:redhat:edeploy:h.1.3.0