PT-2002-2383 · Portalapp · Portalapp

Publicado 2002-12-31 · Atualizado 2017-07-11 · CVE-2002-1659

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PortalApp version 2.2

Description The issue allows local users to gain privileges by modifying the user id variable in the 'user profile.asp' file.

Recommendations For PortalApp version 2.2, avoid using the user id variable in the 'user profile.asp' file until the issue is resolved. As a temporary workaround, consider restricting access to the 'user profile.asp' file to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2002-1659

Produtos afetados

Portalapp

Referências · 5

• 🔥 http://securitytracker.com/id?1005541 · Exploit
• http://secunia.com/advisories/10465 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1659 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10558 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1659 · Nota de Segurança