Vulnerability Details CVE-2020-13377
The web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an authenticated, remote, low-privileged attacker to conduct directory traversal attacks and obtain read and write access to sensitive files.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.5%
CVSS Severity
CVSS v3 Score 8.1
References
- https://inf0seq.github.io/cve/2020/04/21/Path-Traversal-in-Enterprise-loadbalancer-VA-MAX-v8.3.8-and-earlier.html
- https://www.loadbalancer.org/products/virtual/enterprise-va-max/
- https://inf0seq.github.io/cve/2020/04/21/Path-Traversal-in-Enterprise-loadbalancer-VA-MAX-v8.3.8-and-earlier.html
- https://www.loadbalancer.org/products/virtual/enterprise-va-max/
Products affected by CVE-2020-13377
-
cpe:2.3:a:loadbalancer:enterprise_va_max:-
-
cpe:2.3:a:loadbalancer:enterprise_va_max:8.3.3
-
cpe:2.3:a:loadbalancer:enterprise_va_max:8.3.8