CVE-2015-2990

Directory traversal vulnerability in zhtml.cgi in NEOJAPAN desknet NEO 2.0R1.0 through 2.5R1.4 allows remote authenticated users to read arbitrary files via a crafted parameter.

Score

CVSS 2.0 4.0 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2015-09-05

Last modified

2024-08-06

Weaknesses

CWE-22

Affected products

• Desknet Neo (Neojapan)

References

• http://jvn.jp/en/jp/JVN09283606/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000122
• http://www.desknets.com/neo/support/mainte/2590/