What’s Vulnerable › Vulnerabilities

CVE-2017-7433

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-05-18 · updated 2026-06-17
• Weakness: CWE-22

Description

An absolute path traversal vulnerability (CWE-36) in Micro Focus Vibe 4.0.2 and earlier allows a remote authenticated attacker to download arbitrary files from the server by submitting a specially crafted request to the viewFile endpoint. Note that the attack can be performed without authentication if Guest access is enabled (Guest access is disabled by default).

Affected products

• Micro Focus Vibe: through 4.0.2

References

• https://www.novell.com/support/kb/doc.php?id=7019005
• https://www.novell.com/support/kb/doc.php?id=7019005

Get alerted when CVE-2017-7433 or the next vulnerability affects your stack