High severity7.5NVD Advisory· Published Oct 6, 2017· Updated Jun 17, 2026

CVE-2015-1429

Description

Directory traversal vulnerability in Cybele Software Thinfinity Remote Desktop Workstation 3.0.0.3 32-bit and 64-bit allows remote attackers to download arbitrary files via a .. (dot dot) in an unspecified parameter.

Affected products

Cybele Software/Thinfinity Remote Desktop Workstation2 versions
cpe:2.3:a:cybelesoft:thinfinity_remote_desktop_workstation:3.0.0.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cybelesoft:thinfinity_remote_desktop_workstation:3.0.0.3:*:*:*:*:*:*:*
- (no CPE)range: 3.0.0.3

Patches

Vulnerability mechanics

References

www.cybelesoft.com/blog/index.php/cybele-software-inc-security-bulletin-2nvdVendor Advisory
www.perspectiverisk.com/security-advisory-thinfinity-remote-desktop-workstation-directory-traversal/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000