PT-2017-6485 · Unshield · Unshield

Jakub Wilk · Published 2017-04-15 · Updated 2024-06-15 · CVE-2015-1386

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions unshield versions 1.0-1

Description The issue is related to a directory traversal vulnerability.

Recommendations For versions 1.0-1, update to a version that contains a fix for this issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2015-1386

MGASA-2017-0107

OPENSUSE-SU-2024:11484-1

Affected Products

Unshield

References · 16

• 🔥 http://openwall.com/lists/oss-security/2015/01/27/27 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=1185717 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:11484-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0107 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-1386 · Security Note
• https://osv.dev/vulnerability/CVE-2015-1386 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-1386 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-1386 · Security Note
• https://advisories.mageia.org/MGASA-2017-0107.html · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-1386 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-1386 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-1386 · Vendor Advisory
• https://github.com/twogood/unshield/issues/42 · Note
• https://github.com/twogood/unshield/releases/tag/1.4 · Note
• https://suse.com/security/cve/CVE-2015-1386 · Note