CVE-2014-5393
SOS JobScheduler < 1.6.4246 and 1.7.x < 1.7.4241 - Authenticated Path Traversal
Title source: llmDescription
Directory traversal vulnerability in the JobScheduler Operations Center (JOC) in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote authenticated users with the info permission to read arbitrary files in the webroot via unspecified vectors.
References (7)
Core 7
Core References
Exploit x_refsource_misc
http://www.christian-schneider.net/advisories/CVE-2014-5393.txt
Vendor Advisory x_refsource_confirm
http://www.sos-berlin.com/modules/news/article.php?storyid=73
Vendor Advisory x_refsource_confirm
http://www.sos-berlin.com/modules/news/article.php?storyid=74
Exploit x_refsource_misc
http://packetstormsecurity.com/files/128192/JobScheduler-Path-Traversal.html
Various Sources x_refsource_confirm
https://change.sos-berlin.com/browse/JS-1205
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/533373/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/95796
Scores
EPSS
0.0264
EPSS Percentile
83.7%
Details
CWE
CWE-22
Status
published
Products (5)
sos/jobscheduler
1.6.4014
sos/jobscheduler
1.6.4043
sos/jobscheduler
1.7.4177
sos/jobscheduler
1.7.4189
sos/jobscheduler
< 1.6.4131
Published
Sep 11, 2014
Tracked Since
Feb 18, 2026