CVE-2018-10615: Path Traversal
Directory traversal may lead to files being exfiltrated or deleted on the GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior host platform.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-10615?
CVE-2018-10615 has been classified as a medium severity vulnerability due to its potential for directory traversal leading to unauthorized file access.
How do I fix CVE-2018-10615?
To mitigate CVE-2018-10615, it is recommended to update GE MDS PulseNET to version 3.2.2 or later where the vulnerability has been addressed.
What are the risks associated with CVE-2018-10615?
The risks associated with CVE-2018-10615 include potential unauthorized access to sensitive files and the possibility of file manipulation or deletion.
Which versions of GE MDS PulseNET are affected by CVE-2018-10615?
CVE-2018-10615 affects GE MDS PulseNET and MDS PulseNET Enterprise versions 3.2.1 and earlier.
Is there a workaround for CVE-2018-10615 if I cannot update immediately?
While an immediate update is the best fix for CVE-2018-10615, temporarily restricting access to the vulnerable components may help mitigate the risk until an upgrade can be performed.