Update CVE-2015-2166.yaml

patch-1
Prince Chaddha 2021-12-20 13:02:41 +05:30 committed by GitHub
parent 2c279c7388
commit d5c43bb502
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 1 deletions

View File

@ -5,7 +5,9 @@ info:
author: daffainfo
severity: high
description: Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the default URI.
reference: https://www.exploit-db.com/exploits/36619
reference:
- https://www.exploit-db.com/exploits/36619
- https://nvd.nist.gov/vuln/detail/CVE-2015-2166
tags: cve,cve2015,lfi,ericsson
requests: