CVE-2017-14771
Last modified
CVE-2017-14771 is a vulnerability of currently unknown severity. Skybox Manager Client Application prior to 8.5.501 is prone to an arbitrary file upload vulnerability due to insufficient input validation of user-supplied files path when uploading files via the application. During a debugger-pause state, a local authenticated attacker can upload an arbitrary file and overwrite existing files within the scope of the affected application.. EPSS estimates a 0.29% chance of exploitation in the next 30 days.
Description
Skybox Manager Client Application prior to 8.5.501 is prone to an arbitrary file upload vulnerability due to insufficient input validation of user-supplied files path when uploading files via the application. During a debugger-pause state, a local authenticated attacker can upload an arbitrary file and overwrite existing files within the scope of the affected application.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Skyboxsecurity | Skybox Manager Client Application | <= 8.5.500 |
References
- http://www.securityfocus.com/bid/101069Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/101069Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-14771?
How severe is CVE-2017-14771?
How do I fix CVE-2017-14771?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-14764In the Upload Modules page in GeniXCMS 1.1.4, remote authent…
- CVE-2017-14765In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID…
- CVE-2017-14766The Simple Student Result plugin before 1.6.4 for WordPress …
- CVE-2017-14767The sdp_parse_fmtp_config_h264 function in libavformat/rtpde…
- CVE-2017-1477IBM Security Access Manager Appliance 9.0.3 is vulnerable to…
- CVE-2017-14770Skybox Manager Client Application prior to 8.5.501 is prone …
- CVE-2017-14772Skybox Manager Client Application is prone to information di…
- CVE-2017-14773Skybox Manager Client Application prior to 8.5.501 is prone …
- CVE-2017-14775Laravel before 5.5.10 mishandles the remember_me token verif…
- CVE-2017-14776Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2017-14777Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2017-14778Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
Are you affected by CVE-2017-14771?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST