« Volver al listado

CVE-2014-8788

Estado: ModificadaMedia (4)—

GleamTech FileVista before 6.1 allows remote authenticated users to obtain sensitive information via a crafted path when saving a zip file, which reveals the installation path in an error message.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Gleamtech — Filevista

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-8788",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-12-02T16:59:02.510",
  "references": [
    {
      "url": "http://packetstormsecurity.com/files/129304/FileVista-Path-Leakage-Path-Write-Modification.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2014/Nov/87",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://support.gleamtech.com/kb/a10/version-history-of-filevista.aspx",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://packetstormsecurity.com/files/129304/FileVista-Path-Leakage-Path-Write-Modification.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2014/Nov/87",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.gleamtech.com/kb/a10/version-history-of-filevista.aspx",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "GleamTech FileVista before 6.1 allows remote authenticated users to obtain sensitive information via a crafted path when saving a zip file, which reveals the installation path in an error message."
    },
    {
      "lang": "es",
      "value": "GleamTech FileVista anterior a 6.1 permite a usuarios remotos autenticados obtener información sensible a través de una ruta manipulada cuando guarda un fichero zip, lo que revela la ruta de instalación en un mensaje de error."
    }
  ],
  "lastModified": "2026-06-17T00:17:22.997",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gleamtech:filevista:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5548B881-642B-4DC2-A926-5075B56CEB11",
              "versionEndIncluding": "6.0.9"
            },
            {
              "criteria": "cpe:2.3:a:gleamtech:filevista:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4FD87E0C-D063-40E6-897C-00C8746C2E98"
            },
            {
              "criteria": "cpe:2.3:a:gleamtech:filevista:6.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E19A5390-16A2-453E-9E73-6854CAAFBB00"
            },
            {
              "criteria": "cpe:2.3:a:gleamtech:filevista:6.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CB3C44C9-9C90-4AC7-9F56-111EFAE56461"
            },
            {
              "criteria": "cpe:2.3:a:gleamtech:filevista:6.0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C9E3DE5-B522-435D-A25C-39DB0B5CF101"
            },
            {
              "criteria": "cpe:2.3:a:gleamtech:filevista:6.0.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1CA1CA40-F5C1-4E67-BD0C-0537474659D2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}