CVE-2014-2588

McAfee Asset Manager 6.6 - Path Traversal

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the reportFileName parameter.

Exploits (1)

exploitdb WRITEUP
by Brandon Perry · textwebappsjsp
https://www.exploit-db.com/exploits/32368

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/104633
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/66302
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1029927
Exploit mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2014/Mar/325
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/32368
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/91930

Scores

EPSS 0.1799
EPSS Percentile 95.2%

Details

CWE
CWE-22
Status published
Products (1)
mcafee/asset_manager 6.6
Published Mar 24, 2014
Tracked Since Feb 18, 2026