CVE-2017-6527

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to a NUL-terminated directory traversal attack allowing an unauthenticated attacker to access system files readable by the web server user (by using the viewAppletFsa.cgi seqID parameter).

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-03-09

Last modified

2024-08-05

Weaknesses

CWE-22

Affected products

• Dnalims (Dnatools)

References

• http://www.securityfocus.com/bid/96823
• https://www.exploit-db.com/exploits/41578/
• https://www.shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims/