CVEvulnerability

CVE-2016-7843

5.5 MEDIUM Published 2017-04-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-04-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-22

Description

Directory traversal vulnerability in AttacheCase for Java 0.60 and earlier, AttacheCase Lite 1.4.6 and earlier, and AttacheCase Pro 1.5.7 and earlier allows remote attackers to read arbitrary files via specially crafted ATC file.

Affected configurations

• hibara software attachecase for java (<= 0.6.0) • hibara software attachecase lite (<= 1.4.6) • hibara software attachecase pro (<= 1.5.7)

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References