CVE-2019-7174: Critical severity jenkins brakeman vulnerability
Published Apr 9, 2019
·Updated
Roxy Fileman 1.4.5 allows attackers to execute renamefile.php (aka Rename File), createdir.php (aka Create Directory), fileslist.php (aka Echo File List), and movefile.php (aka Move File) operations.
Affected Software
1 affected component
Roxyfileman Roxy Fileman=1.4.5
Event History
Apr 9, 2019
CVE Published
via MITRE·05:58 PM
Data Sourced
via MITRE·05:58 PM
Description
Data Sourced
via NVD·06:29 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-7174?
CVE-2019-7174 is classified as a high severity vulnerability due to its potential to allow unauthorized file operations.
2
How do I fix CVE-2019-7174?
To fix CVE-2019-7174, update Roxy Fileman to the latest version that addresses this vulnerability.
3
What systems are affected by CVE-2019-7174?
CVE-2019-7174 specifically affects Roxy Fileman version 1.4.5.
4
What type of attacks can be performed using CVE-2019-7174?
CVE-2019-7174 allows attackers to execute file management operations like renaming, creating, and moving files without proper authorization.
5
Is there a workaround for CVE-2019-7174?
A temporary workaround for CVE-2019-7174 is to restrict access to Roxy Fileman or remove it entirely until it can be updated.