Unscored CVE-2017-2240 EUVD-2017-11423GHSA-mphx-8gxr-8rp6

Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read arbitrary files via…

Published Jul 14, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Hammock Product: AssetView for MacOS Platform: macOS

Description

Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read arbitrary files via "File Transfer Web Service".

Affected products

Vendor	Product	Affected	Fixed
Hammock	AssetView for MacOS	Ver.9.2.0 and earlier versions	—

References

https://www.hammock.jp/assetview/info/170714.html
http://jvn.jp/en/vu/JVNVU93377948/index.html