Unscored severity · published Oct 2, 2015
CVE-2015-4546
Directory traversal vulnerability in EMC RSA OneStep 6.9 before build 559, as used in RSA Certificate Manager and RSA Registration Manager through 6.9 build 558 and other…
–
CVSS
3.2%
EPSS
No
On KEV
Description
Directory traversal vulnerability in EMC RSA OneStep 6.9 before build 559, as used in RSA Certificate Manager and RSA Registration Manager through 6.9 build 558 and other products, allows remote attackers to read arbitrary files via a crafted KCSOSC_ERROR_PAGE parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RC
Rsa Certificate Manager · Emc
through 6.9 · source: NVD
RO
Rsa Onestep · Emc
through 6.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-4546
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-4546
Third Party Advisory
http://packetstormsecurity.com/files/133784/RSA-OneStep-6.9-Path-Traversal.html
Third Party Advisory
http://seclists.org/bugtraq/2015/Sep/135
Third Party Advisory
http://www.securitytracker.com/id/1033671
More from Rsa Certificate Manager
7.5
CVE-2018-11051
RSA Certificate Manager Versions 6.9 build 560 through 6.9 build 564 contain a path traversal vulnerability in the RSA CMP Enroll Server and the RSA REST Enroll Server
–
CVE-2015-0523
EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allow remote attackers to cause an Administration Server denial of…
–
CVE-2015-0522
Cross-site scripting (XSS) vulnerability in EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allows remote attackers…
–
CVE-2015-0521
Cross-site scripting (XSS) vulnerability in EMC RSA Certificate Manager (RCM) before 6.9 build 558 and RSA Registration Manager (RRM) before 6.9 build 558 allows remote…