Lucene search
HistoryNov 27, 2023 - 5:15 p.m.
CVE-2023-42000
cve-2023-42000
arcserve udp
path traversal
filehandlingservlet
remote attacker
arbitrary files
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
71.5%
Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthenticated remote attacker can exploit it to upload arbitrary files to any location on the file system where the UDP agent is installed.
Affected configurations
Node
arcserveudpRange<9.2
Related
prion
prion
Path traversal
2023-11-27 17:15:00
cvelist
cvelist
CVE-2023-42000 Arcserve UDP Agent Unauthenticated Path Traversal File Upload
2023-11-27 16:55:39
nessus
nessus
Arcserve UDP Agent Path Traversal (CVE-2023-42000)
2024-01-15 00:00:00
cve
cve
CVE-2023-42000
2023-11-27 17:15:08
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
71.5%
Related for NVD:CVE-2023-42000