QwikSec

Security Database

CVE

CWE

Training

CVE-2014-5393

Published: Sep 11, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Directory traversal vulnerability in the JobScheduler Operations Center (JOC) in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote authenticated users with the info permission to read arbitrary files in the webroot via unspecified vectors.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.christian-schneider.net/advisories/CVE-2014-5393.txt

x_refsource_MISC

http://www.sos-berlin.com/modules/news/article.php?storyid=73

x_refsource_CONFIRM

http://www.sos-berlin.com/modules/news/article.php?storyid=74

x_refsource_CONFIRM

http://packetstormsecurity.com/files/128192/JobScheduler-Path-Traversal.html

x_refsource_MISC

https://change.sos-berlin.com/browse/JS-1205

x_refsource_CONFIRM

20140907 CVE-2014-5393 Path Traversal to Sensitive Files in Webroot in "JobScheduler"

mailing-list

x_refsource_BUGTRAQ

jobscheduler-cve20145393-dir-traversal(95796)

vdb-entry

x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.