CVE-2011-3500

2022-10-0316:15:07

mitre

www.cve.org

directory traversal

cogent datahub

web server

remote attackers

http request

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.2%

JSON

Directory traversal vulnerability in the web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to read arbitrary files via a …\ (dot dot backslash) in an HTTP request.

References

aluigi.altervista.org/adv/cogent_2-adv.txt

www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-03.pdf