{"api_version":"1","generated_at":"2026-07-23T08:22:30+00:00","cve":"CVE-2014-0804","urls":{"html":"https://cve.report/CVE-2014-0804","api":"https://cve.report/api/cve/CVE-2014-0804.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-0804","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-0804"},"summary":{"title":"CVE-2014-0804","description":"Directory traversal vulnerability in the CGENE Security File Manager Pro application 1.0.6 and earlier, and Security File Manager Trial application 1.0.6 and earlier, for Android allows attackers to overwrite or create arbitrary files via unspecified vectors.","state":"PUBLISHED","assigner":"jpcert","published_at":"2014-01-12 18:34:56","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-22","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5.8","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://jvn.jp/en/jp/JVN44392991/index.html","name":"http://jvn.jp/en/jp/JVN44392991/index.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"JVN#44392991: Security File Manager vulnerable to directory traversal","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"https://play.google.com/store/apps/details?id=com.cgene.android.secret.filelock.free","name":"https://play.google.com/store/apps/details?id=com.cgene.android.secret.filelock.free","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Not Found","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"https://play.google.com/store/apps/details?id=com.cgene.android.secret.filelock.pro","name":"https://play.google.com/store/apps/details?id=com.cgene.android.secret.filelock.pro","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Not Found","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000003","name":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000003","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0804","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0804","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"804","vulnerable":"1","versionEndIncluding":"1.0.6","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cgene","cpe5":"security_file_manager","cpe6":"*","cpe7":"-","cpe8":"-","cpe9":"*","cpe10":"pro","cpe11":"android","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"804","vulnerable":"1","versionEndIncluding":"1.0.6","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cgene","cpe5":"security_file_manager","cpe6":"*","cpe7":"-","cpe8":"-","cpe9":"*","cpe10":"trial","cpe11":"android","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2014","cve_id":"804","cve":"CVE-2014-0804","epss":"0.003440000","percentile":"0.569430000","score_date":"2026-05-01","updated_at":"2026-05-02 00:02:52"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T09:27:20.028Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://play.google.com/store/apps/details?id=com.cgene.android.secret.filelock.free"},{"name":"JVN#44392991","tags":["third-party-advisory","x_refsource_JVN","x_transferred"],"url":"http://jvn.jp/en/jp/JVN44392991/index.html"},{"name":"JVNDB-2014-000003","tags":["third-party-advisory","x_refsource_JVNDB","x_transferred"],"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000003"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://play.google.com/store/apps/details?id=com.cgene.android.secret.filelock.pro"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-01-10T00:00:00.000Z","descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the CGENE Security File Manager Pro application 1.0.6 and earlier, and Security File Manager Trial application 1.0.6 and earlier, for Android allows attackers to overwrite or create arbitrary files via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2014-01-12T15:57:00.000Z","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","shortName":"jpcert"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"https://play.google.com/store/apps/details?id=com.cgene.android.secret.filelock.free"},{"name":"JVN#44392991","tags":["third-party-advisory","x_refsource_JVN"],"url":"http://jvn.jp/en/jp/JVN44392991/index.html"},{"name":"JVNDB-2014-000003","tags":["third-party-advisory","x_refsource_JVNDB"],"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000003"},{"tags":["x_refsource_CONFIRM"],"url":"https://play.google.com/store/apps/details?id=com.cgene.android.secret.filelock.pro"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"vultures@jpcert.or.jp","ID":"CVE-2014-0804","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Directory traversal vulnerability in the CGENE Security File Manager Pro application 1.0.6 and earlier, and Security File Manager Trial application 1.0.6 and earlier, for Android allows attackers to overwrite or create arbitrary files via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://play.google.com/store/apps/details?id=com.cgene.android.secret.filelock.free","refsource":"CONFIRM","url":"https://play.google.com/store/apps/details?id=com.cgene.android.secret.filelock.free"},{"name":"JVN#44392991","refsource":"JVN","url":"http://jvn.jp/en/jp/JVN44392991/index.html"},{"name":"JVNDB-2014-000003","refsource":"JVNDB","url":"http://jvndb.jvn.jp/jvndb/JVNDB-2014-000003"},{"name":"https://play.google.com/store/apps/details?id=com.cgene.android.secret.filelock.pro","refsource":"CONFIRM","url":"https://play.google.com/store/apps/details?id=com.cgene.android.secret.filelock.pro"}]}}}},"cveMetadata":{"assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","assignerShortName":"jpcert","cveId":"CVE-2014-0804","datePublished":"2014-01-12T15:00:00.000Z","dateReserved":"2014-01-06T00:00:00.000Z","dateUpdated":"2024-08-06T09:27:20.028Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-01-12 18:34:56","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-22","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgene:security_file_manager:*:-:-:*:pro:android:*:*","versionEndIncluding":"1.0.6","matchCriteriaId":"1C1FB6CA-D30E-43F6-A79A-F460FE24E2BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgene:security_file_manager:*:-:-:*:trial:android:*:*","versionEndIncluding":"1.0.6","matchCriteriaId":"097E8194-655D-4485-90CE-B3BDB5E2B5F5"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"804","Ordinal":"1","Title":"CVE-2014-0804","CVE":"CVE-2014-0804","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"804","Ordinal":"1","NoteData":"Directory traversal vulnerability in the CGENE Security File Manager Pro application 1.0.6 and earlier, and Security File Manager Trial application 1.0.6 and earlier, for Android allows attackers to overwrite or create arbitrary files via unspecified vectors.","Type":"Description","Title":"CVE-2014-0804"},{"CveYear":"2014","CveId":"804","Ordinal":"2","NoteData":"2014-01-12","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"804","Ordinal":"3","NoteData":"2014-01-12","Type":"Other","Title":"Modified"}]}}}