CVE-2017-14196

{"id": "CVE-2017-14196", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2017-11-30T02:29:03.167", "references": [{"url": "http://devalias.net/devalias/2017/09/07/squiz-matrix-multiple-vulnerabilities/", "tags": ["Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Squiz Matrix from 5.3 through to 5.3.6.1 and 5.4.1.3. An information disclosure caused by a Path Traversal issue in the 'File Bridge' plugin allowed the existence of files outside of the bridged path to be confirmed."}, {"lang": "es", "value": "Se ha descubierto un problema en Squiz Matrix desde la versi\u00f3n 5.3 hasta la 5.3.6.1 y en la versi\u00f3n 5.4.1.3. Una divulgaci\u00f3n de informaci\u00f3n provocada por un problema de salto de directorio en el plugin \"File Bridge\" permiti\u00f3 que existiesen archivos fuera de la ruta puente que se va a confirmar."}], "lastModified": "2017-12-14T16:16:26.273", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:squiz:matrix:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D9159EBE-EC8A-448C-98B7-56D85B6554F5", "versionEndIncluding": "5.3.6.1", "versionStartIncluding": "5.3.0.0"}, {"criteria": "cpe:2.3:a:squiz:matrix:5.4.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83BC8818-209D-4412-86FA-A3371B5132E9"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}