CVE-2024-27283

{"id": "CVE-2024-27283", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2024-02-22T05:15:10.087", "references": [{"url": "https://www.veritas.com/support/en_US/security/VTS23-020", "source": "cve@mitre.org"}, {"url": "https://www.veritas.com/support/en_US/security/VTS23-020", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-434"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability was discovered in Veritas eDiscovery Platform before 10.2.5. The application administrator can upload potentially malicious files to arbitrary locations on the server on which the application is installed."}, {"lang": "es", "value": "Se descubri\u00f3 una vulnerabilidad en Veritas eDiscovery Platform antes de la versi\u00f3n 10.2.5. El administrador de la aplicaci\u00f3n puede cargar archivos potencialmente maliciosos en ubicaciones arbitrarias del servidor en el que est\u00e1 instalada la aplicaci\u00f3n."}], "lastModified": "2024-11-21T09:04:14.640", "sourceIdentifier": "cve@mitre.org"}