CVE-2023-4475: An Arbitrary File Movement vulnerability was found on the ADM
Published Aug 22, 2023
·Updated
An Arbitrary File Movement vulnerability was found in ASUSTOR Data Master (ADM) allows an attacker to exploit the file renaming feature to move files to unintended directories. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.
Affected Software
1 affected component
ASUSTOR Data Master>=4.0.6.ris1<4.2.2.ri61
Event History
Aug 22, 2023
CVE Published
via MITRE·09:02 AM
Data Sourced
via MITRE·09:02 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-4475.
2
What is the severity rating of CVE-2023-4475?
The severity rating of CVE-2023-4475 is high, with a severity value of 5.5.
3
What is the impact of CVE-2023-4475?
CVE-2023-4475 allows an attacker to exploit the file renaming feature to move files to unintended directories.
4
Which versions of ASUSTOR Data Master (ADM) are affected by this vulnerability?
ADM 4.0.6.RIS1, 4.1.0 and below, as well as ADM 4.2.2.RI61 and below are affected by this vulnerability.
5
Is there a fix available for CVE-2023-4475?
It is recommended to check the vendor's security advisory for any available fixes or patches.