PT-2007-4089 · Alstrasoft · Alstrasoft Live Support

Blackhawk · Publicado 2007-05-21 · Atualizado 2017-10-11 · CVE-2007-2775

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AlstraSoft Live Support version 1.21

Description The issue allows remote attackers to obtain administrative access. This is possible because when administrative credentials are missing, the software sends a redirect to the web browser but does not exit. Attackers can exploit this by making a direct request to the "admin/managesettings.php" endpoint.

Recommendations For AlstraSoft Live Support version 1.21, consider restricting access to the "admin/managesettings.php" endpoint until a fix is available. As a temporary workaround, ensure that administrative credentials are always provided to prevent unauthorized access.

Exploit

Correção

Identificadores relacionados

CVE-2007-2775

Produtos afetados

Alstrasoft Live Support

Referências · 7

• 🔥 https://exploit-db.com/exploits/3957 · Exploit
• http://secunia.com/advisories/25337 · Nota
• http://osvdb.org/36638 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2775 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34395 · Nota
• http://itablackhawk.altervista.org/exploit/alsoft_exploit_pack · Nota
• http://securityfocus.com/bid/24073 · Nota