Vulnerability Description
CGI RESCUE BloBee 1.20 and earlier allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via unspecified vectors.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cgi Rescue | Blobee | <= 1.12 |
Related Weaknesses (CWE)
References
- http://jvn.jp/en/jp/JVN24336273/index.htmlVendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000087Vendor Advisory
- http://www.securityfocus.com/bid/75183
- http://jvn.jp/en/jp/JVN24336273/index.htmlVendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000087Vendor Advisory
- http://www.securityfocus.com/bid/75183
FAQ
What is CVE-2015-2962?
CVE-2015-2962 is a vulnerability with a CVSS score of 7.5 (HIGH). CGI RESCUE BloBee 1.20 and earlier allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via unspecified vectors.
How severe is CVE-2015-2962?
CVE-2015-2962 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-2962?
Check the references section above for vendor advisories and patch information. Affected products include: Cgi Rescue Blobee.