CVE-2018-7806 Information
Feb 14, 2021
cve
Description
Data Center Operation allows for the upload of a zip file from its user interface to the server. A carefully crafted malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such it could allow for the arbitrary upload of files contained with the zip onto the server file system outside of the intended directory. This is leveraging the more commonly known ZipSlip vulnerability within Java code.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Reference
Attack Complexity
LOW
Privileges Required
LOW
User Interaction Required
LOW
Scope
NONE
Confidentiality Impact
UNCHANGED
Integrity Impact
HIGH
Availability Impact
HIGH
Base Score
HIGH
Base Severity
8.8
Share on: