CVE-2014-3702

Critical

Published: 16/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files, potentially leading to denial of service due to resource consumption.

Risk Assessment

Attackers can exploit this vulnerability to fill the file system, which may result in service outages and disruption of application functionality.

Recommendation

It is recommended to update eNovance eDeploy to the latest version that fixes this vulnerability and implement appropriate security measures against directory traversal attacks.

Original NVD description (English source)

Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently cause a denial of service (resource consumption) via a .. (dot dot) the session parameter.