CVE-2015-5671

Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to bypass intended access restrictions and read arbitrary uploaded files via unspecified vectors.

Score

CVSS 2.0 5.0 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2015-10-29

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Enisys Gw (Techno Project Japan)

References

• http://jvn.jp/en/jp/JVN68289108/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000170
• http://www.tpj.co.jp/enisys/resource.html