by Kastro
Paper/Archive/CVE-2023-3701

CVE-2023-3701

Aqua eSolutions Aqua Drive — Relative path traversal in Aqua eSolutions

EPSS 0.8%CVSS 9.9
critical.is priorityof 100
41
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 55.3.553 × 2011.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files of the cloud disk platform, affecting the integrity and availability of the entire platform.

Affected

ProductAffectedFixed inSource
Aqua Drive 2.4–CNA

Scores by source

INCIBE (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refincibe.es/en/incibe-cert/notices/aviso/relative-path-traversal-aqua-esolutions