CVE-2014-2232

Published: Dec 1, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to read arbitrary files via unspecified vectors.

Affected (2)

Products: Infoware: Mapsuite

Infoware

1 product

Mapsuite

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Infoware Mapsuite	1.0 ≤ version < 1.0.36
Infoware Mapsuite	1.1 ≤ version < 1.1.49

Related CWEs

CWE-21

References (6)

http://iw.mapandroute.de/MapAPI-1.0/releaseHistory.jsp

Source: cve@mitre.org

Vendor Advisory

http://iw.mapandroute.de/MapAPI-1.1/releaseHistory.jsp

Source: cve@mitre.org

Vendor Advisory

http://www.christian-schneider.net/advisories/CVE-2014-2232.txt

Source: cve@mitre.org

Third Party Advisory

http://iw.mapandroute.de/MapAPI-1.0/releaseHistory.jsp

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://iw.mapandroute.de/MapAPI-1.1/releaseHistory.jsp

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.christian-schneider.net/advisories/CVE-2014-2232.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.