CVE-2023-3701

CRITICAL

9.9

Descricao

Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files of the cloud disk platform, affecting the integrity and availability of the entire platform.

Detalhes CVE

Pontuacao CVSS v3.19.9

SeveridadeCRITICAL

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado10/4/2023

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

aquaesolutions:aqua_drive

Fraquezas (CWE)

CWE-23CWE-22

Referencias

https://www.incibe.es/en/incibe-cert/notices/aviso/relative-path-traversal-aqua-esolutions(cve-coordination@incibe.es)

https://www.incibe.es/en/incibe-cert/notices/aviso/relative-path-traversal-aqua-esolutions(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.