{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "In Code42 Enterprise 6.7.5 and earlier, 6.8.4 through 6.8.8, and 7.0.0 a vulnerability has been identified that may allow arbitrary files to be uploaded to Code42 servers and executed. This vulnerability could allow an attacker to create directories and save files on Code42 servers, which could potentially lead to code execution."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-09-17T11:55:31", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://code42.com/r/support/CVE-2019-15131"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-15131", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "In Code42 Enterprise 6.7.5 and earlier, 6.8.4 through 6.8.8, and 7.0.0 a vulnerability has been identified that may allow arbitrary files to be uploaded to Code42 servers and executed. This vulnerability could allow an attacker to create directories and save files on Code42 servers, which could potentially lead to code execution."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories", "refsource": "MISC", "url": "https://support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories"}, {"name": "https://code42.com/r/support/CVE-2019-15131", "refsource": "CONFIRM", "url": "https://code42.com/r/support/CVE-2019-15131"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2019-15131", "datePublished": "2019-09-17T11:54:29", "dateReserved": "2019-08-17T00:00:00", "dateUpdated": "2019-09-17T11:55:31", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:code42:code42:*:*:*:*:enterprise:*:*:*", "matchCriteriaId": "26888583-9BF6-4EE3-8F59-C15CFBE371FF", "versionEndIncluding": "6.7.5", "vulnerable": true}, {"criteria": "cpe:2.3:a:code42:code42:*:*:*:*:enterprise:*:*:*", "matchCriteriaId": "DB0CE390-6BCB-4A0E-8257-AD6480F2ABFE", "versionEndIncluding": "6.8.8", "versionStartIncluding": "6.8.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:code42:code42:7.0.0:*:*:*:enterprise:*:*:*", "matchCriteriaId": "C6B27735-D667-4A90-9D71-EDF8F38EB9B9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "In Code42 Enterprise 6.7.5 and earlier, 6.8.4 through 6.8.8, and 7.0.0 a vulnerability has been identified that may allow arbitrary files to be uploaded to Code42 servers and executed. This vulnerability could allow an attacker to create directories and save files on Code42 servers, which could potentially lead to code execution."}, {"lang": "es", "value": "En Code42 Enterprise versi\u00f3n 6.7.5 y anteriores, versiones 6.8.4 hasta 6.8.8 y versi\u00f3n 7.0.0, ha sido identificada una vulnerabilidad que puede permitir que archivos arbitrarios sean cargados y ejecutados en los servidores de Code42. Esta vulnerabilidad podr\u00eda permitir a un atacante crear directorios y guardar archivos en servidores Code42, lo que podr\u00eda conllevar potencialmente a la ejecuci\u00f3n de c\u00f3digo."}], "id": "CVE-2019-15131", "lastModified": "2019-09-17T15:04:56.163", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-09-17T12:15:10.167", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://code42.com/r/support/CVE-2019-15131"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-434"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}