PT-2014-8872
CVE-2014-9181
·
تاريخ النشر
2014-12-02
·
تاريخ التحديث
2021-12-10
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Plex Media Server versions prior to 0.9.9.3
Description
The issue allows remote attackers to read arbitrary files by using a .. (dot dot) in the URI to access certain directories, such as "manage/" or "web/". Additionally, remote authenticated users can read arbitrary files via a .. (dot dot) in the URI to "resources/".
Recommendations
For versions prior to 0.9.9.3, update to version 0.9.9.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the "manage/", "web/", and "resources/" directories until the update is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾