CVE-2013-2641: Path Traversal
Published Mar 18, 2014
·Updated
Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter.
Affected Software
4 affected components
Sophos Web Appliance Firmware<=3.7.8.1
Sophos Web Appliance
All of the following
Sophos Web Appliance Firmware<=3.7.8.1
Sophos Web Appliance
Event History
Mar 18, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·05:02 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-2641?
The severity of CVE-2013-2641 is classified as high due to its potential to allow remote attackers to read arbitrary files.
2
How do I fix CVE-2013-2641?
To fix CVE-2013-2641, upgrade the Sophos Web Appliance firmware to version 3.7.8.2 or later.
3
What systems are affected by CVE-2013-2641?
CVE-2013-2641 affects Sophos Web Appliance versions prior to 3.7.8.2.
4
What type of vulnerability is CVE-2013-2641?
CVE-2013-2641 is a directory traversal vulnerability that enables unauthorized file access.
5
Can CVE-2013-2641 be exploited remotely?
Yes, CVE-2013-2641 can be exploited remotely by attackers using the id parameter.