What is CVE-2017-14614?

CVE-2017-14614 is a medium-severity vulnerability in Gridgain, classified under Path Traversal. CVSS score: 6.5/10. Published 2017-10-10.

How severe is CVE-2017-14614?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Path Traversal in Gridgain

CVE-2017-14614

Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before 1.9.7, and 8.x before 8.1.5 allows remote authenticated users to read arbitrary files on remote cluster nodes via a crafted path.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.016 (72.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Gridgain — versions 8.0.0, 8.0.1, 8.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cve@mitre.org (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)

Frequently asked questions

What is CVE-2017-14614?: CVE-2017-14614 is a medium-severity vulnerability in Gridgain, classified under Path Traversal. CVSS score: 6.5/10. Published 2017-10-10.
How severe is CVE-2017-14614?: Medium severity. CVSS v3 base score is 6.5 out of 10.