CVE-2023-3701

CRITICAL

9.9

Description

Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files of the cloud disk platform, affecting the integrity and availability of the entire platform.

CVE Details

CVSS v3.1 Score9.9

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published10/4/2023

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

aquaesolutions:aqua_drive

Weaknesses (CWE)

CWE-23CWE-22

References

https://www.incibe.es/en/incibe-cert/notices/aviso/relative-path-traversal-aqua-esolutions(cve-coordination@incibe.es)

https://www.incibe.es/en/incibe-cert/notices/aviso/relative-path-traversal-aqua-esolutions(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.