{"id":"CVE-2017-14614","aliases":["EUVD-2017-6115","GHSA-jv6w-84rc-rmvf"],"status":"published","title":"Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x...","description":"Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before 1.9.7, and 8.x before 8.1.5 allows remote authenticated users to read arbitrary files on remote cluster nodes via a crafted path.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01568,"percentile":0.75503,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2017-10-09T14:00:00Z","modified":"2026-06-17T01:06:29Z","products":[{"vendor":"gridgain","product":"gridgain"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2017/10/05/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14614"},{"url":"https://github.com/advisories/GHSA-jv6w-84rc-rmvf"}],"sources":{"cve":[{"id":"CVE-2017-14614","description":"Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before 1.9.7, and 8.x before 8.1.5 allows remote authenticated users to read arbitrary files on remote cluster nodes via a crafted path.","status":"published","published":"2017-10-09T14:00:00Z","modified":"2024-08-05T19:34:39.41Z","updated_at":"2026-11-02T14:33:11.928814Z"}],"euvd":[{"id":"EUVD-2017-6115","description":"Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before 1.9.7, and 8.x before 8.1.5 allows remote authenticated users to read arbitrary files on remote cluster nodes via a crafted path.","status":"published","published":"2017-10-09T14:00:00Z","modified":"2024-08-05T19:34:39Z","updated_at":"2026-11-03T02:23:16.177631Z"}],"ghsa":[{"id":"GHSA-jv6w-84rc-rmvf","title":"Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x...","description":"Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before 1.9.7, and 8.x before 8.1.5 allows remote authenticated users to read arbitrary files on remote cluster nodes via a crafted path.","status":"published","published":"2022-05-17T00:26:11Z","modified":"2023-02-03T05:01:45Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:53:02.192117Z"}],"nvd":[{"id":"CVE-2017-14614","description":"Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before 1.9.7, and 8.x before 8.1.5 allows remote authenticated users to read arbitrary files on remote cluster nodes via a crafted path.","status":"published","published":"2017-10-10T01:30:21.907Z","modified":"2026-06-17T01:06:29.323Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:04:01.734197Z"}]}}