medium5.0
CVE-2014-2232
Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to read arbitrary files …
Impact
Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to read arbitrary files via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Infoware | Mapsuite | from 1.0 before 1.0.36 from 1.1 before 1.1.49 |
Weakness classification
References
- NVD record
- CVE.org record
- http://iw.mapandroute.de/MapAPI-1.0/releaseHistory.jsp
- http://iw.mapandroute.de/MapAPI-1.1/releaseHistory.jsp
- http://www.christian-schneider.net/advisories/CVE-2014-2232.txt
- http://iw.mapandroute.de/MapAPI-1.0/releaseHistory.jsp
- http://iw.mapandroute.de/MapAPI-1.1/releaseHistory.jsp
- http://www.christian-schneider.net/advisories/CVE-2014-2232.txt