Log in Start free

Vulnerability · Published Oct 4, 2023 · Assigned by INCIBE

CVE-2023-3701Relative path traversal in Aqua eSolutions

Critical 9.9

In plain English

A critical-severity security flaw in Aqua Drive from Aqua eSolutions. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 55% of all known vulnerabilities).

Severity (CVSS 3.1)9.9Critical
Exploit odds (30 days)0.8%top 44.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files of the cloud disk platform, affecting the integrity and availability of the entire platform.

Affected products (as reported)

VendorProductVersions
Aqua eSolutions Aqua Drive 2.4

Weakness: CWE-23 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References