CVE-2019-11013 - Nimble Streamer 3.0.2-2 through 3.5.4-9 has a ../ directory traversal vulnerability

Back Back to CVE browser

MEDIUM

Nimble Streamer 3.0.2-2 through 3.5.4-9 has a ../ directory traversal vulnerability

Published Aug 22, 2019

6.5

MEDIUM

CVSS 3.0

EPSS 27.39%

Description

Nimble Streamer 3.0.2-2 through 3.5.4-9 has a ../ directory traversal vulnerability. Successful exploitation could allow an attacker to traverse the file system to access files or directories that are outside of the restricted directory on the remote server.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (3)

http://packetstormsecurity.com/files/154196/Nimble-Streamer-3.x-Directory-Traversal.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2724
Advisory
https://mayaseven.com/nimble-directory-traversal-in-nimble-streamer-version-3-0-2-2-to-3-5-4-9/
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/154196/Nimble-Streamer-3.x-Directory-Traversal.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2724		Advisory
https://mayaseven.com/nimble-directory-traversal-in-nimble-streamer-version-3-0-2-2-to-3-5-4-9/		x_refsource_MISCExploitThird Party Advisory