CVE-2011-1654

CWE-22 — Path Traversal3 documents3 sources

Severity

7.5HIGH

EPSS

3.3%

top 12.82%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Broadcom Total Defense

Timeline

PublishedApr 18

Latest updateMay 13

Description

Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll in the Management Server in CA Total Defense (TD) r12 before SE2 allows remote attackers to execute arbitrary code via directory traversal sequences in the GUID parameter in an upload request to FileUploadHandler.ashx.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDbroadcom/total_defenser12

🔴Vulnerability Details

GHSA

GHSA-8xvg-wm2x-mw68: Directory traversal vulnerability in the Heartbeat Web Service in CA↗2022-05-13

▶

CVEList

CVE-2011-1654: Directory traversal vulnerability in the Heartbeat Web Service in CA↗2011-04-15

▶