PT-2008-5829 · Portalapp · Portalapp

R3Dm0V3 · Publicado 2008-10-20 · Atualizado 2017-09-29 · CVE-2008-4614

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PortalApp version 4.0

Description The issue allows remote attackers to create and delete forums, topics, and replies due to a lack of authentication requirement for certain API endpoints, specifically "forums.asp" and "content.asp".

Recommendations For PortalApp version 4.0, consider implementing proper authentication mechanisms for the "forums.asp" and "content.asp" endpoints to restrict unauthorized access until a patch is available. As a temporary workaround, restrict access to these endpoints to minimize the risk of exploitation.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-4614

Produtos afetados

Portalapp

Referências · 7

• 🔥 https://exploit-db.com/exploits/4848 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4614 · Nota de Segurança
• http://aspapp.com/content.asp?CatId=197&ContentType=Downloads · Correção
• http://secunia.com/advisories/28337 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39457 · Nota
• http://securityreason.com/securityalert/4439 · Nota
• http://securityfocus.com/bid/27170 · Nota