Path Traversal in Netsas Enigma Network Management Solution
CVE-2019-16064
NETSAS Enigma NMS 65.0.0 and prior suffers from a directory traversal vulnerability that can allow an authenticated user to access files and directories stored outside of the web root folder. By exploiting this vulnerability, it is possible for an attacker to list operating-system directory contents on the server, create directories and upload files in permissible locations, and modify filenames and delete files that are accessible by the user running the web server instance.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.013 (67.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.6 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N.
Affected products
- Netsas Enigma_network_management_solution
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-16064?
- CVE-2019-16064 is a critical-severity vulnerability in Netsas Enigma Network Management Solution, classified under Path Traversal. CVSS score: 9.6/10. Published 2020-03-19.
- How severe is CVE-2019-16064?
- Critical severity. CVSS v3 base score is 9.6 out of 10.