CVE-2023-4475

Published: Aug 22, 2023Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

An Arbitrary File Movement vulnerability was found in ASUSTOR Data Master (ADM) allows an attacker to exploit the file renaming feature to move files to unintended directories. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.

Affected (1)

Products: Asustor: Data Master

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Asustor Data Master	From 4.0.6.ris1 to 4.2.2.ri61

Related CWEs

Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

References (2)

https://www.asustor.com/security/security_advisory_detail?id=30

Source: security@asustor.com

Vendor Advisory

https://www.asustor.com/security/security_advisory_detail?id=30

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.