PT-2008-5269 · Avtech · Avtech Pager Enterprise

Publicado 2008-09-05 · Atualizado 2008-09-05 · CVE-2008-3939

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AVTECH PageR Enterprise versions prior to 5.0.7

Description A directory traversal issue in the web interface allows remote attackers to read arbitrary files via directory traversal sequences in the URI.

Recommendations For versions prior to 5.0.7, update to version 5.0.7 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-3939

Produtos afetados

Avtech Pager Enterprise

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2008-3939 · Nota de Segurança
• http://secunia.com/advisories/31693 · Aviso do Fabricante
• http://securityfocus.com/bid/30987 · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064227.html · Nota