CVE-2014-2976

Sixnet Sixview Manager - Path Traversal

Title source: rule
STIX 2.1

Description

Directory traversal vulnerability in Sixnet SixView Manager 2.4.1 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 18081.

Exploits (1)

exploitdb WORKING POC
by daniel svartman · textwebappshardware
https://www.exploit-db.com/exploits/32973

References (2)

Core 2
Core References
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/32973
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/58231

Scores

EPSS 0.1466
EPSS Percentile 94.5%

Details

CWE
CWE-22
Status published
Products (1)
sixnet/sixview_manager 2.4.1
Published Apr 23, 2014
Tracked Since Feb 18, 2026