Unscored CVE-2014-3702 EUVD-2014-3648GHSA-cqv6-gvj3-rfwc

Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently ca…

Published Oct 16, 2017 · Updated Aug 6, 2024 · Assigned by redhat

Description

Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently cause a denial of service (resource consumption) via a .. (dot dot) the session parameter.

References

https://github.com/redhat-cip/edeploy/issues/231
https://bugzilla.redhat.com/show_bug.cgi?id=1153470