PT-2014-6449
CVE-2014-5393
·
Published
2014-09-11
·
Updated
2018-10-09
Description by
CVSS 2.0
4.0
MediumMetricsAV:N/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
SOS JobScheduler versions prior to 1.6.4246
SOS JobScheduler versions 1.7.x prior to 1.7.4241
Description
A directory traversal issue exists in the JobScheduler Operations Center (JOC) that allows remote authenticated users with the info permission to read arbitrary files in the webroot.
Recommendations
For SOS JobScheduler versions prior to 1.6.4246, update to version 1.6.4246 or later.
For SOS JobScheduler versions 1.7.x prior to 1.7.4241, update to version 1.7.4241 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾