668
VMScore

CVE-2018-16716

Published: 02/05/2019 Updated: 03/05/2019
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.1 | Impact Score: 5.2 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

A path traversal vulnerability exists in viewcgi.c in the 2.0.7 up to and including 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files (i.e., significant information disclosure) or file deletion via the nph-viewgif.cgi query string.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

nih ncbi toolbox