CVE-2017-14614

Published: Oct 10, 2017Modified: May 13, 2026

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before 1.9.7, and 8.x before 8.1.5 allows remote authenticated users to read arbitrary files on remote cluster nodes via a crafted path.

Affected (65)

Products: Gridgain: Gridgain

Gridgain

1 product

Gridgain

Configuration A

47 vulnerable

Vulnerable Software	Affected Versions
Gridgain Gridgain	Version 8.0.0 ea1
Gridgain Gridgain	Version 8.0.0 ea2
Gridgain Gridgain	Version 8.0.0 ea3
Gridgain Gridgain	Version 8.0.0 ea4
Gridgain Gridgain	Version 8.0.0 ea5
Gridgain Gridgain	Version 8.0.1
Gridgain Gridgain	Version 8.0.1 ea1
Gridgain Gridgain	Version 8.0.1 ea2
Gridgain Gridgain	Version 8.0.1 ea3
Gridgain Gridgain	Version 8.0.1 ea4
Gridgain Gridgain	Version 8.0.1 ea5
Gridgain Gridgain	Version 8.0.1 ea6
Gridgain Gridgain	Version 8.0.1 ea7
Gridgain Gridgain	Version 8.0.1 ea8
Gridgain Gridgain	Version 8.0.1 ea9
Gridgain Gridgain	Version 8.0.2 ea1
Gridgain Gridgain	Version 8.0.2 ea2
Gridgain Gridgain	Version 8.0.2 ea3
Gridgain Gridgain	Version 8.0.3 ea10
Gridgain Gridgain	Version 8.0.3 ea11
Gridgain Gridgain	Version 8.0.3 ea12
Gridgain Gridgain	Version 8.0.3 ea13
Gridgain Gridgain	Version 8.0.3 ea14
Gridgain Gridgain	Version 8.0.3 ea15
Gridgain Gridgain	Version 8.0.3 ea16
Gridgain Gridgain	Version 8.0.3 ea1
Gridgain Gridgain	Version 8.0.3 ea2
Gridgain Gridgain	Version 8.0.3 ea3
Gridgain Gridgain	Version 8.0.3 ea4
Gridgain Gridgain	Version 8.0.3 ea5
Gridgain Gridgain	Version 8.0.3 ea6
Gridgain Gridgain	Version 8.0.3 ea7
Gridgain Gridgain	Version 8.0.3 ea8
Gridgain Gridgain	Version 8.0.3 ea9
Gridgain Gridgain	Version 8.0.4 ea1
Gridgain Gridgain	Version 8.1.1
Gridgain Gridgain	Version 8.1.2
Gridgain Gridgain	Version 8.1.3
Gridgain Gridgain	Version 8.1.3 p1
Gridgain Gridgain	Version 8.1.3 p2
Gridgain Gridgain	Version 8.1.3 p3
Gridgain Gridgain	Version 8.1.3 p4
Gridgain Gridgain	Version 8.1.3 p5
Gridgain Gridgain	Version 8.1.4
Gridgain Gridgain	Version 8.1.4 p1
Gridgain Gridgain	Version 8.1.4 p2
Gridgain Gridgain	Version 8.1.4 p3

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Gridgain Gridgain	Version 1.9.1
Gridgain Gridgain	Version 1.9.2
Gridgain Gridgain	Version 1.9.3
Gridgain Gridgain	Version 1.9.4
Gridgain Gridgain	Version 1.9.5
Gridgain Gridgain	Version 1.9.6

Configuration C

11 vulnerable

Vulnerable Software	Affected Versions
Gridgain Gridgain	Version 1.8.10
Gridgain Gridgain	Version 1.8.11
Gridgain Gridgain	Version 1.8.1
Gridgain Gridgain	Version 1.8.2
Gridgain Gridgain	Version 1.8.3
Gridgain Gridgain	Version 1.8.4
Gridgain Gridgain	Version 1.8.5
Gridgain Gridgain	Version 1.8.6
Gridgain Gridgain	Version 1.8.7
Gridgain Gridgain	Version 1.8.8
Gridgain Gridgain	Version 1.8.9

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Gridgain Gridgain	Up to 1.7.15

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (2)

http://www.openwall.com/lists/oss-security/2017/10/05/1

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2017/10/05/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

Timeline

No history available yet.