Read the docs
TI-2017-10710 Aliases CVE-2017-14614GHSA-jv6w-84rc-rmvf

Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16…

Priority LOW 32CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-22 and the CVSS impact.

Summary

Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before 1.9.7, and 8.x before 8.1.5 allows remote authenticated users to read arbitrary files on remote cluster nodes via a crafted path.

Why it matters now

EPSS 0.01568 75th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 65

CPEVersionsRoleVendor
cpe:2.3:a:gridgain:gridgain:8.0.0:ea1:*:*:*:*:*:*8.0.0 ea1VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.0:ea2:*:*:*:*:*:*8.0.0 ea2VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.0:ea3:*:*:*:*:*:*8.0.0 ea3VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.0:ea4:*:*:*:*:*:*8.0.0 ea4VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.0:ea5:*:*:*:*:*:*8.0.0 ea5VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.1:*:*:*:*:*:*:*8.0.1VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.1:ea1:*:*:*:*:*:*8.0.1 ea1VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.1:ea2:*:*:*:*:*:*8.0.1 ea2VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.1:ea3:*:*:*:*:*:*8.0.1 ea3VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.1:ea4:*:*:*:*:*:*8.0.1 ea4VulnerableGridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.0:ea1:*:*:*:*:*:* Versions 8.0.0 ea1 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.0:ea2:*:*:*:*:*:* Versions 8.0.0 ea2 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.0:ea3:*:*:*:*:*:* Versions 8.0.0 ea3 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.0:ea4:*:*:*:*:*:* Versions 8.0.0 ea4 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.0:ea5:*:*:*:*:*:* Versions 8.0.0 ea5 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.1:*:*:*:*:*:*:* Versions 8.0.1 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.1:ea1:*:*:*:*:*:* Versions 8.0.1 ea1 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.1:ea2:*:*:*:*:*:* Versions 8.0.1 ea2 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.1:ea3:*:*:*:*:*:* Versions 8.0.1 ea3 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.1:ea4:*:*:*:*:*:* Versions 8.0.1 ea4 Vulnerable ·Gridgain
Show 55 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:gridgain:gridgain:8.0.1:ea5:*:*:*:*:*:*8.0.1 ea5VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.1:ea6:*:*:*:*:*:*8.0.1 ea6VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.1:ea7:*:*:*:*:*:*8.0.1 ea7VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.1:ea8:*:*:*:*:*:*8.0.1 ea8VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.1:ea9:*:*:*:*:*:*8.0.1 ea9VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.2:ea1:*:*:*:*:*:*8.0.2 ea1VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.2:ea2:*:*:*:*:*:*8.0.2 ea2VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.2:ea3:*:*:*:*:*:*8.0.2 ea3VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.3:ea1:*:*:*:*:*:*8.0.3 ea1VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.3:ea10:*:*:*:*:*:*8.0.3 ea10VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.3:ea11:*:*:*:*:*:*8.0.3 ea11VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.3:ea12:*:*:*:*:*:*8.0.3 ea12VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.3:ea13:*:*:*:*:*:*8.0.3 ea13VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.3:ea14:*:*:*:*:*:*8.0.3 ea14VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.3:ea15:*:*:*:*:*:*8.0.3 ea15VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.3:ea16:*:*:*:*:*:*8.0.3 ea16VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.3:ea2:*:*:*:*:*:*8.0.3 ea2VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.3:ea3:*:*:*:*:*:*8.0.3 ea3VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.3:ea4:*:*:*:*:*:*8.0.3 ea4VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.3:ea5:*:*:*:*:*:*8.0.3 ea5VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.3:ea6:*:*:*:*:*:*8.0.3 ea6VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.3:ea7:*:*:*:*:*:*8.0.3 ea7VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.3:ea8:*:*:*:*:*:*8.0.3 ea8VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.3:ea9:*:*:*:*:*:*8.0.3 ea9VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.0.4:ea1:*:*:*:*:*:*8.0.4 ea1VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.1.1:*:*:*:*:*:*:*8.1.1VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.1.2:*:*:*:*:*:*:*8.1.2VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.1.3:*:*:*:*:*:*:*8.1.3VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.1.3:p1:*:*:*:*:*:*8.1.3 p1VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.1.3:p2:*:*:*:*:*:*8.1.3 p2VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.1.3:p3:*:*:*:*:*:*8.1.3 p3VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.1.3:p4:*:*:*:*:*:*8.1.3 p4VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.1.3:p5:*:*:*:*:*:*8.1.3 p5VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.1.4:*:*:*:*:*:*:*8.1.4VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.1.4:p1:*:*:*:*:*:*8.1.4 p1VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.1.4:p2:*:*:*:*:*:*8.1.4 p2VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:8.1.4:p3:*:*:*:*:*:*8.1.4 p3VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:1.9.1:*:*:*:*:*:*:*1.9.1VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:1.9.2:*:*:*:*:*:*:*1.9.2VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:1.9.3:*:*:*:*:*:*:*1.9.3VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:1.9.4:*:*:*:*:*:*:*1.9.4VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:1.9.5:*:*:*:*:*:*:*1.9.5VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:1.9.6:*:*:*:*:*:*:*1.9.6VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:1.8.1:*:*:*:*:*:*:*1.8.1VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:1.8.2:*:*:*:*:*:*:*1.8.2VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:1.8.3:*:*:*:*:*:*:*1.8.3VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:1.8.4:*:*:*:*:*:*:*1.8.4VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:1.8.5:*:*:*:*:*:*:*1.8.5VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:1.8.6:*:*:*:*:*:*:*1.8.6VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:1.8.7:*:*:*:*:*:*:*1.8.7VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:1.8.8:*:*:*:*:*:*:*1.8.8VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:1.8.9:*:*:*:*:*:*:*1.8.9VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:1.8.10:*:*:*:*:*:*:*1.8.10VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:1.8.11:*:*:*:*:*:*:*1.8.11VulnerableGridgain
cpe:2.3:a:gridgain:gridgain:*:*:*:*:*:*:*:*up to 1.7.15VulnerableGridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.1:ea5:*:*:*:*:*:* Versions 8.0.1 ea5 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.1:ea6:*:*:*:*:*:* Versions 8.0.1 ea6 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.1:ea7:*:*:*:*:*:* Versions 8.0.1 ea7 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.1:ea8:*:*:*:*:*:* Versions 8.0.1 ea8 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.1:ea9:*:*:*:*:*:* Versions 8.0.1 ea9 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.2:ea1:*:*:*:*:*:* Versions 8.0.2 ea1 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.2:ea2:*:*:*:*:*:* Versions 8.0.2 ea2 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.2:ea3:*:*:*:*:*:* Versions 8.0.2 ea3 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.3:ea1:*:*:*:*:*:* Versions 8.0.3 ea1 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.3:ea10:*:*:*:*:*:* Versions 8.0.3 ea10 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.3:ea11:*:*:*:*:*:* Versions 8.0.3 ea11 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.3:ea12:*:*:*:*:*:* Versions 8.0.3 ea12 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.3:ea13:*:*:*:*:*:* Versions 8.0.3 ea13 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.3:ea14:*:*:*:*:*:* Versions 8.0.3 ea14 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.3:ea15:*:*:*:*:*:* Versions 8.0.3 ea15 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.3:ea16:*:*:*:*:*:* Versions 8.0.3 ea16 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.3:ea2:*:*:*:*:*:* Versions 8.0.3 ea2 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.3:ea3:*:*:*:*:*:* Versions 8.0.3 ea3 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.3:ea4:*:*:*:*:*:* Versions 8.0.3 ea4 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.3:ea5:*:*:*:*:*:* Versions 8.0.3 ea5 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.3:ea6:*:*:*:*:*:* Versions 8.0.3 ea6 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.3:ea7:*:*:*:*:*:* Versions 8.0.3 ea7 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.3:ea8:*:*:*:*:*:* Versions 8.0.3 ea8 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.3:ea9:*:*:*:*:*:* Versions 8.0.3 ea9 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.0.4:ea1:*:*:*:*:*:* Versions 8.0.4 ea1 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.1.1:*:*:*:*:*:*:* Versions 8.1.1 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.1.2:*:*:*:*:*:*:* Versions 8.1.2 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.1.3:*:*:*:*:*:*:* Versions 8.1.3 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.1.3:p1:*:*:*:*:*:* Versions 8.1.3 p1 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.1.3:p2:*:*:*:*:*:* Versions 8.1.3 p2 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.1.3:p3:*:*:*:*:*:* Versions 8.1.3 p3 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.1.3:p4:*:*:*:*:*:* Versions 8.1.3 p4 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.1.3:p5:*:*:*:*:*:* Versions 8.1.3 p5 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.1.4:*:*:*:*:*:*:* Versions 8.1.4 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.1.4:p1:*:*:*:*:*:* Versions 8.1.4 p1 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.1.4:p2:*:*:*:*:*:* Versions 8.1.4 p2 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:8.1.4:p3:*:*:*:*:*:* Versions 8.1.4 p3 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:1.9.1:*:*:*:*:*:*:* Versions 1.9.1 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:1.9.2:*:*:*:*:*:*:* Versions 1.9.2 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:1.9.3:*:*:*:*:*:*:* Versions 1.9.3 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:1.9.4:*:*:*:*:*:*:* Versions 1.9.4 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:1.9.5:*:*:*:*:*:*:* Versions 1.9.5 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:1.9.6:*:*:*:*:*:*:* Versions 1.9.6 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:1.8.1:*:*:*:*:*:*:* Versions 1.8.1 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:1.8.2:*:*:*:*:*:*:* Versions 1.8.2 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:1.8.3:*:*:*:*:*:*:* Versions 1.8.3 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:1.8.4:*:*:*:*:*:*:* Versions 1.8.4 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:1.8.5:*:*:*:*:*:*:* Versions 1.8.5 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:1.8.6:*:*:*:*:*:*:* Versions 1.8.6 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:1.8.7:*:*:*:*:*:*:* Versions 1.8.7 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:1.8.8:*:*:*:*:*:*:* Versions 1.8.8 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:1.8.9:*:*:*:*:*:*:* Versions 1.8.9 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:1.8.10:*:*:*:*:*:*:* Versions 1.8.10 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:1.8.11:*:*:*:*:*:*:* Versions 1.8.11 Vulnerable ·Gridgain
  • cpe:2.3:a:gridgain:gridgain:*:*:*:*:*:*:*:* Versions up to 1.7.15 Vulnerable ·Gridgain

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-14614
  2. 2026-10-03 Alias added: GHSA-jv6w-84rc-rmvf

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences