Executive Summary

This vulnerability in Eptura Archibus 2024.03.01.109 affects the "Run script" and "Server File" components of the "Database Update Wizard". It is a directory traversal vulnerability, which means an attacker could potentially manipulate file paths to access directories and files outside the intended scope, possibly leading to unauthorized access to sensitive files or system resources.

Useful 0 Not Useful 0

Impact Analysis

The directory traversal vulnerability could allow an attacker to access or modify files on the server that should be restricted. This could lead to unauthorized disclosure of sensitive information, alteration of critical files, or disruption of the facility management operations that Archibus supports, potentially impacting maintenance, asset tracking, space planning, and other integrated functions. [1]

Useful 0 Not Useful 0

Compliance Impact

The provided resources do not specify how the directory traversal vulnerability in Eptura Archibus 2024.03.01.109 affects compliance with common standards and regulations such as GDPR or HIPAA. While Archibus offers government compliance features including FedRAMP authorization for U.S. federal security standards, there is no direct information linking this specific vulnerability to impacts on compliance with GDPR, HIPAA, or similar regulations. [1]

Useful 0 Not Useful 0