cvelist/2017/7xxx/CVE-2017-7929.json

{
   "CVE_data_meta" : {
      "ASSIGNER" : "ics-cert@hq.dhs.gov",
      "ID" : "CVE-2017-7929",
      "STATE" : "PUBLIC"
   },
   "affects" : {
      "vendor" : {
         "vendor_data" : [
            {
               "product" : {
                  "product_data" : [
                     {
                        "product_name" : "Advantech WebAccess",
                        "version" : {
                           "version_data" : [
                              {
                                 "version_value" : "Advantech WebAccess"
                              }
                           ]
                        }
                     }
                  ]
               },
               "vendor_name" : "n/a"
            }
         ]
      }
   },
   "data_format" : "MITRE",
   "data_type" : "CVE",
   "data_version" : "4.0",
   "description" : {
      "description_data" : [
         {
            "lang" : "eng",
            "value" : "An Absolute Path Traversal issue was discovered in Advantech WebAccess Version 8.1 and prior. The absolute path traversal vulnerability has been identified, which may allow an attacker to traverse the file system to access restricted files or directories."
         }
      ]
   },
   "problemtype" : {
      "problemtype_data" : [
         {
            "description" : [
               {
                  "lang" : "eng",
                  "value" : "CWE-36"
               }
            ]
         }
      ]
   },
   "references" : {
      "reference_data" : [
         {
            "name" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-124-03",
            "refsource" : "MISC",
            "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-124-03"
         },
         {
            "name" : "98311",
            "refsource" : "BID",
            "url" : "http://www.securityfocus.com/bid/98311"
         }
      ]
   }
}