Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on port (1) 6015 or (2) 6016, or (3) an absolute pathname to port 6017.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.03447
Percentile: 0.8702

CVSS Scoring

Affected Products

• cpe:2.3:a:astaware:searchdisc:3.1:*:*:*:*:*:*:*
• cpe:2.3:a:sun:sunone_starter_kit:2.0:*:*:*:*:*:*:*

← Back to Home