CVE-2019-12314

Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS/etc/passwd URI.

CVSS v3.0

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

84.22% chance of exploitation in the next 30 days, 100th percentile

Nuclei

critical · CWE-22

Published

2019-05-24

Updated

2024-08-04

Proof-of-concept exploits (3)

• http://packetstormsecurity.com/files/153079/Deltek-Maconomy-2.2.5-Local-File-Inclusion.ht…
• JameelNabbo/exploits/blob/master/Maconomy%20Erp%20local%20file%20include.txt
• ras313/CVE-2019-123140★ · 2019-11-05

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12314.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/46931

References

• CVE Record
• NVD entry

Related

• CVE-2010-1429
• CVE-2018-11235
• CVE-2019-12279
• CVE-2019-12593
• CVE-2019-12313
• CVE-2019-12323