VulnerabilityModified
CVE-2008-0760
Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.4.1.0 and earlier, and Sentinel Keys Server 1.0.4.0 and earlier, allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the URI.
MEDIUM 5.0EPSS 3.32%
Does this matter?
Lower severity and a low EPSS score (3.32%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.4.1.0 and earlier, and Sentinel Keys Server 1.0.4.0 and earlier, allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the URI. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-6483.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 3.32% probability · 88th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- safenet/sentinel keys server · safenet/sentinel protection server
- Source
- cve@mitre.org
References
- http://aluigi.altervista.org/adv/sentinella-adv.txtExploit
- http://secunia.com/advisories/28863Vendor Advisory
- http://securityreason.com/securityalert/3646
- http://www.securityfocus.com/archive/1/487954/100/0/threaded
- http://www.securityfocus.com/bid/27735Exploit
- http://www.vupen.com/english/advisories/2008/0499
- http://aluigi.altervista.org/adv/sentinella-adv.txtExploit
- http://secunia.com/advisories/28863Vendor Advisory
- http://securityreason.com/securityalert/3646
- http://www.securityfocus.com/archive/1/487954/100/0/threaded
- http://www.securityfocus.com/bid/27735Exploit
- http://www.vupen.com/english/advisories/2008/0499
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.