VulnerabilityModified
CVE-2014-5393
Directory traversal vulnerability in the JobScheduler Operations Center (JOC) in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote authenticated users with the info permission to read arbitrary files in the webroot via unspecified…
MEDIUM 4.0EPSS 2.64%
Does this matter?
Lower severity and a low EPSS score (2.64%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in the JobScheduler Operations Center (JOC) in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote authenticated users with the info permission to read arbitrary files in the webroot via unspecified vectors.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
- EPSS
- 2.64% probability · 85th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- sos/jobscheduler
- Source
- cve@mitre.org
References
- http://packetstormsecurity.com/files/128192/JobScheduler-Path-Traversal.htmlExploit
- http://www.christian-schneider.net/advisories/CVE-2014-5393.txtExploit
- http://www.securityfocus.com/archive/1/533373/100/0/threaded
- http://www.sos-berlin.com/modules/news/article.php?storyid=73Vendor Advisory
- http://www.sos-berlin.com/modules/news/article.php?storyid=74Vendor Advisory
- https://change.sos-berlin.com/browse/JS-1205
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95796
- http://packetstormsecurity.com/files/128192/JobScheduler-Path-Traversal.htmlExploit
- http://www.christian-schneider.net/advisories/CVE-2014-5393.txtExploit
- http://www.securityfocus.com/archive/1/533373/100/0/threaded
- http://www.sos-berlin.com/modules/news/article.php?storyid=73Vendor Advisory
- http://www.sos-berlin.com/modules/news/article.php?storyid=74Vendor Advisory
- https://change.sos-berlin.com/browse/JS-1205
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95796
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.