CVE-2017-2240: Path Traversal
Published Jul 14, 2017
·Updated
Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read arbitrary files via "File Transfer Web Service".
Affected Software
2 affected components
Hammock Assetview=9.2
Apple iOS and macOS<=-
Remediation
Patch Available
Event History
Jul 14, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-2240?
CVE-2017-2240 is classified as a high severity vulnerability due to its potential to expose sensitive files.
2
How do I fix CVE-2017-2240?
To fix CVE-2017-2240, users should upgrade to AssetView for MacOS version 9.2.1 or later.
3
What systems are affected by CVE-2017-2240?
CVE-2017-2240 affects AssetView for MacOS version 9.2.0 and earlier.
4
What type of vulnerability is CVE-2017-2240?
CVE-2017-2240 is a directory traversal vulnerability that allows remote attackers to read arbitrary files.
5
Can CVE-2017-2240 be exploited remotely?
Yes, CVE-2017-2240 can be exploited remotely through the File Transfer Web Service.