Lucene search

Japan Vulnerability NotesJVN:88862608

HistoryFeb 27, 2015 - 12:00 a.m.

JVN#88862608: Joyful Note vulnerability in handling files

2015-02-2700:00:00

Japan Vulnerability Notes

jvn.jp

118

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.041 Low

EPSS

Percentile

92.2%

JSON

Joyful Note from KENT-WEB is a bulletin board software that allows users to upload binary files such as image files. Joyful Note contains a vulnerability in handling files.

Impact

A remote attacker may create arbitrary files or delete existing files on the server. As a result, arbitrary code may be executed.

Solution

Apply an update
Update to the latest version according to the information provided by the developer.

Products Affected

Joyful Note Ver 5.21 and earlier

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.041 Low

EPSS

Percentile

92.2%

JSON

Related for JVN:88862608