PT-2007-3957 · Efilecabinet · Efilecabinet

Publicado 2007-05-13 · Atualizado 2018-10-16 · CVE-2007-2638

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions eFileCabinet version 3.3

Description The issue allows remote attackers to bypass authentication and access restricted portions of the interface via an invalid filecabinetnumber. This can be leveraged to obtain sensitive information or create new data structures.

Recommendations For eFileCabinet version 3.3, consider restricting access to the interface until a fix is available, and avoid using invalid filecabinetnumber values to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2007-2638

Produtos afetados

Efilecabinet

Referências · 6

• http://securityreason.com/securityalert/2696 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34251 · Nota
• http://osvdb.org/34774 · Nota
• http://securityfocus.com/archive/1/468314/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2638 · Nota de Segurança
• http://securityfocus.com/bid/23944 · Nota