CVE-2014-2232 Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to read arbitrary files via unspecified vectors.
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to read arbitrary files via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| infoware mapsuite | >= 1.0, < 1.0.36 | 1.0.36 |
| infoware mapsuite | >= 1.1, < 1.1.49 | 1.1.49 |
References
- iw.mapandroute.de vendor-advisory
- iw.mapandroute.de vendor-advisory
- www.christian-schneider.net third-party-advisory