CVE-2015-5305
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2015-5305
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Directory traversal vulnerability in Kubernetes, as used in Red Hat OpenShift Enterprise 3.0, allows attackers to write to arbitrary files via a crafted object type name, which is not properly handled before passing it to etcd.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Red Hat OpenShift Enterprise 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat OpenShift Enterprise是美国红帽（Red Hat）公司的一款企业版平台即服务（PaaS）云计算平台，它支持构建、测试、部署和运行应用程序。 Red Hat OpenShift Enterprise 3.0版本中存在路径遍历漏洞。攻击者可借助特制的对象类型名称利用该漏洞写入任意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2015-5305
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2015-5305
请登录查看更多情报信息。
- https://bugzilla.redhat.com/show_bug.cgi?id=1273969x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2015-5305
Same Patch Batch · n/a · 2015-11-06 · 22 CVEs total
| CVE-2015-7394 | 多款F5产品安全漏洞 | |
| CVE-2015-8082 | Drupal Login Disable模块安全漏洞 | |
| CVE-2015-8081 | Drupal Field as Block模块信息泄露漏洞 | |
| CVE-2015-7809 | Sensio Labs Twig 远程代码执行漏洞 | |
| CVE-2015-7763 | IBM OpenAFS 信息泄露漏洞 | |
| CVE-2015-7762 | IBM OpenAFS 信息泄露漏洞 | |
| CVE-2015-5225 | QEMU 缓冲区错误漏洞 | |
| CVE-2014-9749 | Squid 安全绕过漏洞 | |
| CVE-2015-6855 | QEMU‘hw/ide/core.c’拒绝服务漏洞 | |
| CVE-2015-7697 | Info-ZIP UnZip 拒绝服务漏洞 | |
| CVE-2015-7696 | Info-ZIP UnZip 基于堆的缓冲区错误漏洞 | |
| CVE-2015-6291 | Cisco Email Security Appliance AsyncOS 输入验证漏洞 | |
| CVE-2015-6546 | 多款F5产品拒绝服务漏洞 | |
| CVE-2015-7770 | Dell SonicWall TotalSecure TZ 100 输入验证漏洞 | |
| CVE-2015-6316 | Cisco Mobility Services Engine sshd_config 信任管理漏洞 | |
| CVE-2015-6298 | Cisco Email Security Appliance AsyncOS 操作系统命令注入漏洞 | |
| CVE-2015-6292 | Cisco Email Security Appliance AsyncOS 资源管理错误漏洞 | |
| CVE-2015-5672 | 多款TYPE-MOON产品操作系统命令注入漏洞 | |
| CVE-2015-4282 | Cisco Mobility Services Engine 权限许可和访问控制漏洞 | |
| CVE-2015-6321 | Cisco AsyncOS 资源管理错误漏洞 |
Showing top 20 of 22 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2015-5305
No comments yet