CVE-2024-12014

CVSS V2 None CVSS V3 None

Description

Path Traversal and Insecure Direct Object Reference (IDOR) vulnerabilities in the eSignaViewer component in eSigna product versions 1.0 to 1.5 on all platforms allow an unauthenticated attacker to access arbitrary files in the document system via manipulation of file paths and object identifiers.

Overview

CVE ID
CVE-2024-12014

Assigner
INCIBE

Vulnerability Status
PUBLISHED

Published Version
2024-12-20T12:58:02.961Z

Last Modified Date
2024-12-20T15:48:58.229Z

Weakness Enumerations

CWE	URL
CWE-20	http://cwe.mitre.org/data/definitions/20.html

References

Reference URL	Reference Tags
https://edgewatch.com/vulnerability-advisories/path-traversal-and-idor-vulnerabilities-in-esignaviewer-allow-unauthorized-file-access/

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-12014
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12014

History

Created	Old Value	New Value	Data Type	Notes
2024-12-21 13:20:27				Added to TrackCVE