2024-07-15 14:03:11 +00:00

29 lines
1.0 KiB
JSON

{
"id": "CVE-2024-31947",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-07-12T23:15:10.000",
"lastModified": "2024-07-15T13:00:34.853",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "StoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows Directory Traversal by authenticated users. Using a crafted path parameter with the Online Help facility can expose sensitive system information."
},
{
"lang": "es",
"value": "StoneFly Storage Concentrator (SC y SCVM) anterior a 8.0.4.26 permite el Directory Traversal por parte de usuarios autenticados. El uso de un par\u00e1metro de ruta manipulado con la funci\u00f3n de ayuda en l\u00ednea puede exponer informaci\u00f3n confidencial del sistema."
}
],
"metrics": {},
"references": [
{
"url": "https://stonefly.com",
"source": "cve@mitre.org"
},
{
"url": "https://stonefly.com/security-advisories/cve-2024-31947/",
"source": "cve@mitre.org"
}
]
}