« Volver al listado

CVE-2015-2962

Estado: ModificadaAlta (7.5)—

CGI RESCUE BloBee 1.20 and earlier allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

CGI Rescue — Blobee

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-2962",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "vultures@jpcert.or.jp",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-06-13T14:59:09.293",
  "references": [
    {
      "url": "http://jvn.jp/en/jp/JVN24336273/index.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2015-000087",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://www.securityfocus.com/bid/75183",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://jvn.jp/en/jp/JVN24336273/index.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2015-000087",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/75183",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "CGI RESCUE BloBee 1.20 and earlier allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "CGI RESCUE BloBee 1.20 y anteriores permite a atacantes remotos escribir en ficheros arbitrarios, y como consecuencia ejecutar código arbitrario, a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:25:02.973",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cgi_rescue:blobee:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F2255637-1635-4D14-915A-312863116AD7",
              "versionEndIncluding": "1.12"
            },
            {
              "criteria": "cpe:2.3:a:cgi_rescue:blobee:0.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "02421954-B1CB-4015-AD58-FAD53883424F"
            },
            {
              "criteria": "cpe:2.3:a:cgi_rescue:blobee:0.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E62262B-4591-4E9E-8752-A0C168379311"
            },
            {
              "criteria": "cpe:2.3:a:cgi_rescue:blobee:1.00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "75A8E0C1-205B-4A2C-9BA0-11ED49ED8FC8"
            },
            {
              "criteria": "cpe:2.3:a:cgi_rescue:blobee:1.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "861CA308-6D77-4B80-933C-30B820A6B9D5"
            },
            {
              "criteria": "cpe:2.3:a:cgi_rescue:blobee:1.02:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "768F47D5-AD64-426D-91A8-4EE36A2E7C08"
            },
            {
              "criteria": "cpe:2.3:a:cgi_rescue:blobee:1.03:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E40AE145-7C8B-4265-8904-AAE22F398632"
            },
            {
              "criteria": "cpe:2.3:a:cgi_rescue:blobee:1.04:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "62E83AA4-245D-435F-9B44-407C1783C28C"
            },
            {
              "criteria": "cpe:2.3:a:cgi_rescue:blobee:1.05:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "004E44D5-80A0-41AC-98FB-72017C679260"
            },
            {
              "criteria": "cpe:2.3:a:cgi_rescue:blobee:1.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D7B0F0CD-9078-4F9D-9859-9051CC567688"
            },
            {
              "criteria": "cpe:2.3:a:cgi_rescue:blobee:1.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "48BE051D-5F8B-400F-B7E2-8630A82B209D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp"
}