CVE-2018-16716: Path Traversal

Q: What is the severity of CVE-2018-16716?

CVE-2018-16716 is a critical vulnerability that allows for information disclosure and potential file deletion.

Q: How do I fix CVE-2018-16716?

To fix CVE-2018-16716, upgrade the NCBI ToolBox to version 2.2.27 or later, where this vulnerability is addressed.

Q: What systems are affected by CVE-2018-16716?

CVE-2018-16716 affects NCBI ToolBox versions 2.0.7 through 2.2.26.

Q: What type of attacks can exploit CVE-2018-16716?

CVE-2018-16716 can be exploited through crafted query strings to access unauthorized files or delete files.

Q: Is CVE-2018-16716 easy to exploit?

CVE-2018-16716 can be easily exploited by an attacker with knowledge of the vulnerable system's web interface.

Published May 2, 2019

Updated

A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files (i.e., significant information disclosure) or file deletion via the nph-viewgif.cgi query string.

Affected Software

1 affected component

Nih Ncbi Toolbox>=2.0.7<=2.2.26

Event History

May 2, 2019

CVE Published

via MITRE·07:19 PM

Data Sourced

via MITRE·07:19 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-16716?

CVE-2018-16716 is a critical vulnerability that allows for information disclosure and potential file deletion.

How do I fix CVE-2018-16716?

To fix CVE-2018-16716, upgrade the NCBI ToolBox to version 2.2.27 or later, where this vulnerability is addressed.

What systems are affected by CVE-2018-16716?