Lucene search
HistoryFeb 28, 2015 - 2:59 a.m.
CVE-2015-0889
cve-2015-0889
kent-web
joyful note
remote attackers
delete files
write to files
execute arbitrary code
vectors
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.029 Low
EPSS
Percentile
90.9%
KENT-WEB Joyful Note before 5.3 allows remote attackers to delete files or write to files, and consequently execute arbitrary code, via vectors involving an article.
Affected configurations
Node
kent-webjoyful_noteRange≤5.21
| CPE | Name | Operator | Version |
|---|---|---|---|
| kent-web:joyful_note | kent-web joyful note | le | 5.21 |
Related
cvelist
cvelist
CVE-2015-0889
2015-02-28 02:00:00
jvn
jvn
JVN#88862608: Joyful Note vulnerability in handling files
2015-02-27 00:00:00
prion
prion
Code injection
2015-02-28 02:59:00
nvd
nvd
CVE-2015-0889
2015-02-28 02:59:40
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.029 Low
EPSS
Percentile
90.9%
Related for CVE-2015-0889