CVE-2016-7843

medium

Description

Directory traversal vulnerability in AttacheCase for Java 0.60 and earlier, AttacheCase Lite 1.4.6 and earlier, and AttacheCase Pro 1.5.7 and earlier allows remote attackers to read arbitrary files via specially crafted ATC file.

References

Advisories

http://www.securityfocus.com/bid/95445

http://maruuofactory.life.coocan.jp/attachecase/#pathTraversal

http://jvn.jp/en/jp/JVN28331227/index.html

Details

Source: Mitre, NVD

Published: 2017-04-28

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N