CVE-2014-9181: Path Traversal
Published Dec 2, 2014
·Updated
Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote attackers to read arbitrary files via a .. (dot dot) in the URI to (1) manage/ or (2) web/ or remote authenticated users to read arbitrary files via a .. (dot dot) in the URI to resources/.
Affected Software
1 affected component
Plex Media Server<=0.9.9.2
Remediation
Event History
Dec 2, 2014
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-9181?
CVE-2014-9181 is considered a medium severity vulnerability due to its potential for remote file read access.
2
How do I fix CVE-2014-9181?
To fix CVE-2014-9181, update Plex Media Server to version 0.9.9.3 or later.
3
What types of attacks are possible with CVE-2014-9181?
CVE-2014-9181 allows attackers to perform directory traversal attacks and read arbitrary files on the server.
4
Who is affected by CVE-2014-9181?
CVE-2014-9181 affects users running Plex Media Server versions prior to 0.9.9.3.
5
Can authenticated users exploit CVE-2014-9181?
Yes, remote authenticated users can exploit CVE-2014-9181 to read arbitrary files.