Unscored CVE-2017-14614 EUVD-2017-6115GHSA-jv6w-84rc-rmvf

Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before 1.9.7, and 8.x befo…

Published Oct 9, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before 1.9.7, and 8.x before 8.1.5 allows remote authenticated users to read arbitrary files on remote cluster nodes via a crafted path.

References

[oss-security] 20171005 [CVE-2017-14614] GridGain Visor GUI Console - File System Path Traversal mailing-list