CVE-2018-12306: Path Traversal
Published Dec 4, 2018
·Updated
Directory Traversal in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to view arbitrary files by modifying the "file1" URL parameter, a similar issue to CVE-2018-11344.
Affected Software
2 affected components
ASUSTOR Data Master=3.1.1
ASUSTOR As602t
Event History
Dec 4, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2018-12306.
2
What is the severity of CVE-2018-12306?
The severity of CVE-2018-12306 is high.
3
How does the Directory Traversal vulnerability in ASUSTOR ADM version 3.1.1 work?
The Directory Traversal vulnerability in ASUSTOR ADM version 3.1.1 allows attackers to view arbitrary files by modifying the "file1" URL parameter.
4
Which software versions are affected by CVE-2018-12306?
ASUSTOR ADM version 3.1.1 is affected by CVE-2018-12306.
5
How can I fix the Directory Traversal vulnerability in ASUSTOR ADM version 3.1.1?
To fix the Directory Traversal vulnerability in ASUSTOR ADM version 3.1.1, update to a version that is not affected by this vulnerability.