VYPR
← All advisories
High severity7.5NVD Advisory· Published May 3, 2017· Updated May 13, 2026

CVE-2016-10367

CVE-2016-10367

Description

In Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch), an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request utilizing a simple URL encoding bypass, %252f instead of /.

Affected products

4
  • Opsview/Opsview4 versions
    cpe:2.3:a:opsview:opsview:4.5.0:*:*:*:pro:*:*:*+ 3 more
    • cpe:2.3:a:opsview:opsview:4.5.0:*:*:*:pro:*:*:*
    • cpe:2.3:a:opsview:opsview:4.6.4:*:*:*:pro:*:*:*
    • cpe:2.3:a:opsview:opsview:5.0.2:*:*:*:pro:*:*:*
    • cpe:2.3:a:opsview:opsview:5.1.0:*:*:*:pro:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.