CVE-2013-6785 Directory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before SMT_X9_315 allows authenticated attackers to read arbitrary files via the url_name parameter.
MediumCVSS 4.3
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before SMT_X9_315 allows authenticated attackers to read arbitrary files via the url_name parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| supermicro intelligent platform management interface | < smt_x9_315 | smt_x9_315 |
References
- blog.rapid7.com not-applicable
- www.tenable.com third-party-advisory