Critical severity9.1NVD Advisory· Published Oct 16, 2017· Updated May 13, 2026
CVE-2014-3702
CVE-2014-3702
Description
Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently cause a denial of service (resource consumption) via a .. (dot dot) the session parameter.
Affected products
8cpe:2.3:a:redhat:edeploy:0.1.0:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:redhat:edeploy:0.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:edeploy:0.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:edeploy:1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:edeploy:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:edeploy:h.1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:edeploy:h.1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:edeploy:h.1.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:edeploy:h.1.3.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- github.com/redhat-cip/edeploy/issues/231nvdThird Party Advisory
News mentions
0No linked articles in our index yet.