PT-2003-2081 · Whale Communications · E-Gap

Publicado 2003-12-31 · Atualizado 2017-07-11 · CVE-2003-1127

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Whale Communications e-Gap version 2.5

Description The issue allows remote attackers to obtain the source code for the login page via the HTTP TRACE method, which bypasses the preprocessor. This can be exploited by sending a request to the vulnerable API endpoint, such as "/login", using the HTTP TRACE method.

Recommendations For Whale Communications e-Gap version 2.5, consider disabling the HTTP TRACE method to prevent exploitation until a patch is available. Restrict access to sensitive pages, such as the login page, to minimize the risk of source code disclosure.

Exploit

Correção

Identificadores relacionados

CVE-2003-1127

Produtos afetados

E-Gap

Referências · 5

• 🔥 http://securityfocus.com/bid/9431 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14869 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1127 · Nota de Segurança
• http://procheckup.com/security_info/vuln_pr0307.html · Nota
• http://kb.cert.org/vuls/id/371470 · Nota