Lucene search

K
nvd[email protected]NVD:CVE-2015-2862
HistoryJul 20, 2015 - 11:59 p.m.

CVE-2015-2862

2015-07-2023:59:01
CWE-22
web.nvd.nist.gov
2

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

6.1 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.2%

Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote authenticated users to read arbitrary files via a crafted HTTP request.

Affected configurations

NVD
Node
kaseyavirtual_system_administratorRange7.07.0.0.29
OR
kaseyavirtual_system_administratorRange8.08.0.0.18
OR
kaseyavirtual_system_administratorRange9.09.0.0.14
OR
kaseyavirtual_system_administratorRange9.19.1.0.4

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

6.1 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.2%