Vulnerability Details : CVE-2021-36123
An issue was discovered in Echo ShareCare 8.15.5. The TextReader feature in General/TextReader/TextReader.cfm is susceptible to a local file inclusion vulnerability when processing remote input in the textFile parameter from an authenticated user, leading to the ability to read arbitrary files on the server filesystems as well any files accessible via Universal Naming Convention (UNC) paths.
Vulnerability category: File inclusion
Products affected by CVE-2021-36123
- cpe:2.3:a:echobh:sharecare:8.15.5:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-36123
0.18%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 41 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-36123
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:N/A:N |
8.0
|
2.9
|
NIST | |
|
6.5
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
2.8
|
3.6
|
NIST |
References for CVE-2021-36123
-
https://github.com/atredispartners/advisories/blob/master/ATREDIS-2021-0001.md
advisories/ATREDIS-2021-0001.md at master · atredispartners/advisories · GitHubThird Party Advisory
Jump to