Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2015-0933

Overview

Vulnerability Score 3.5 3.5
CVE Id CVE-2015-0933
Last Modified 04 Mar 2015 02:09:01
Published 03 Mar 2015 09:59:02
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact NONE NONE
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity MEDIUM
Authentication SINGLE_INSTANCE

CVE-2015-0933

Summary

Absolute path traversal vulnerability in ShareLaTeX 0.1.3 and earlier, when the paranoid openin_any setting is omitted, allows remote authenticated users to read arbitrary files via a \include command.

Vulnerable Systems

Application

  • Sharelatex 0.1.2


References

CERT-VN - VU#302668


Last Updated: 27 May 2016 11:07:58