CVE-2019-14362

2019-07-28 20:15:11 2019-08-14 13:21:19

Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could allow remote authenticated attackers to replace a file on the server via the getAttachmentDirectoryForNewAttachment inpKey value.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

NONE
Openbravo Openbravo erp 3.0 - (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack0.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack10 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack10.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack10.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack10.3 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack11 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack11.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack12 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack12.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack12.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack13 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack13.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack13.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack14 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack14.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack14.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack15 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack15.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack15.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack16 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack16.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack16.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack16.3 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack17 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack17.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack17.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack17.3 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack18 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack18.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack18.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack18.3 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack18.4 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack18.5 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack19 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack19.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack19.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack19.3 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack19.4 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack2.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack2.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack2.3 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack2.4 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack20 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack21 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack21.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack22 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack22.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack22.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack22.3 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack23 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack23.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack23.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack24 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack24.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack24.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack25 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack25.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack25.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack26 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack26.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack26.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack26.3 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack26.4 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack27 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack27.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack28 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack28.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack28.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack28.3 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack28.4 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack28.5 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack29 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack29.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack29.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack29.3 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack29.4 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack3 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack3.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack3.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack30 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack30.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack30.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack30.3 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack31 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack31.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack31.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack31.3 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack31.4 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack4 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack4.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack4.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack5 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack5.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack5.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack5.3 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack6 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack6.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack6.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack7 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack7.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack7.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack7.3 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack8 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack8.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack8.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack8.3 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack8.4 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack9 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack9.1 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack9.2 (not an official CPE) Openbravo Openbravo erp 3.0 Maintenance pack9.3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr14q2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr14q2.1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr14q2.2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr14q2.3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr14q2.4 (not an official CPE) Openbravo Openbravo erp 3.0 Pr14q2.5 (not an official CPE) Openbravo Openbravo erp 3.0 Pr14q2.6 (not an official CPE) Openbravo Openbravo erp 3.0 Pr14q3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr14q3.1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr14q3.2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr14q3.3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr14q3.4 (not an official CPE) Openbravo Openbravo erp 3.0 Pr14q3.5 (not an official CPE) Openbravo Openbravo erp 3.0 Pr14q3.6 (not an official CPE) Openbravo Openbravo erp 3.0 Pr14q3.7 (not an official CPE) Openbravo Openbravo erp 3.0 Pr14q3.8 (not an official CPE) Openbravo Openbravo erp 3.0 Pr14q4 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q1.1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q1.2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q1.3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q1.4 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q1.5 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q2.1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q2.2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q2.3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q2.4 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q2.5 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q2.6 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q3.1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q3.2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q3.3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q3.4 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q3.5 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q4 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q4.1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q4.2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q4.3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q4.4 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q4.5 (not an official CPE) Openbravo Openbravo erp 3.0 Pr15q4.6 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q1.1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q1.2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q1.3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q2.1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q2.2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q2.3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q2.4 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q3.1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q3.2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q3.3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q3.4 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q3.5 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q4 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q4.1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q4.2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q4.3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr16q4.4 (not an official CPE) Openbravo Openbravo erp 3.0 Pr17q1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr17q1.1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr17q1.2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr17q1.3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr17q2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr17q2.1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr17q2.2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr17q2.3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr17q2.4 (not an official CPE) Openbravo Openbravo erp 3.0 Pr17q3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr17q3.1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr17q3.2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr17q3.3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr17q4 (not an official CPE) Openbravo Openbravo erp 3.0 Pr17q4.1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr17q4.2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr18q1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr18q1.1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr18q1.2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr18q1.3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr18q2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr18q2.1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr18q2.2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr18q2.3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr18q3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr18q3.1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr18q3.2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr18q3.3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr18q3.4 (not an official CPE) Openbravo Openbravo erp 3.0 Pr18q3.5 (not an official CPE) Openbravo Openbravo erp 3.0 Pr18q4 (not an official CPE) Openbravo Openbravo erp 3.0 Pr18q4.1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr18q4.2 (not an official CPE) Openbravo Openbravo erp 3.0 Pr18q4.3 (not an official CPE) Openbravo Openbravo erp 3.0 Pr19q1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr19q1.1 (not an official CPE) Openbravo Openbravo erp 3.0 Pr19q1.2 (not an official CPE)