VDB
CVE-2017-5595
CVE-2017-5595
PUBLISHED
CVSS 5.5 MEDIUM
A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile(), which allows an authenticated attacker to read local system files (e.g., /etc/passwd) in the context of the web server user (www-data). The attack vector is a .. (dot dot) in the path parameter within a zm/index.php?view=file&path= request.
EPSS 0.45% · 38.3th percentile
Risk Scores
CVSS 3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.45%
38.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:Pro:16.04:LTS | zoneminder | 0, 1.29.0+dfsg-1, 1.29.0+dfsg-1ubuntu1 |
Timeline
- Feb 5, 2017 PoC Published
- Feb 6, 2017 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 24, 2021 EPSS Score
- Aug 26, 2021 EPSS Score
- Oct 29, 2021 EPSS Score
- Dec 31, 2021 EPSS Score
- Mar 5, 2022 EPSS Score
- May 7, 2022 EPSS Score
- Jul 10, 2022 EPSS Score
- Sep 12, 2022 EPSS Score
- Nov 15, 2022 EPSS Score
References
- http://seclists.org/bugtraq/2017/Feb/6 third-party-advisory
- http://seclists.org/fulldisclosure/2017/Feb/11 third-party-advisory
- http://www.openwall.com/lists/oss-security/2017/02/05/1 third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2017-5595 third-party-advisory
- https://github.com/ZoneMinder/ZoneMinder/commit/8b19fca9927cdec07cc9dd09bdcf2496a5ae69b3 fix
- https://ubuntu.com/security/CVE-2017-5595 advisory