CVE-2019-17327 - JEUS 7 Fix#0~5 and JEUS 8Fix#0~1 versions contains a directory traversal vulnerability caused by improper input parameter check when uploading installation file in administration web page

Back Back to CVE browser

HIGH

JEUS 7 Fix#0~5 and JEUS 8Fix#0~1 versions contains a directory traversal vulnerability caused by improper input parameter check when uploading installation file in administration web page

Published Nov 8, 2019

7.2

HIGH

CVSS 3.1

EPSS 2.68%

Description

JEUS 7 Fix#0~5 and JEUS 8Fix#0~1 versions contains a directory traversal vulnerability caused by improper input parameter check when uploading installation file in administration web page. That leads remote attacker to execute arbitrary code via uploaded file.

Affected products

Vendor TmaxSoft Product JEUS Default
n/a
- Version
  JEUS 7 Fix#0~5, JEUS 8Fix#0~1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

TmaxSoft

JEUS

n/a

Version	Status	Constraints
JEUS 7 Fix#0~5, JEUS 8Fix#0~1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7740
Advisory
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35197
x_refsource_MISCPatchThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7740		Advisory
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35197		x_refsource_MISCPatchThird Party Advisory