PT-2009-2553 · Velocity · Velocity Security Management System

Publicado 2009-08-26 · Atualizado 2018-10-11 · CVE-2008-7084

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Velocity Security Management System version 1.0

Description A directory traversal issue in the web server allows remote attackers to read arbitrary files by including a .. (dot dot) in the URI.

Recommendations For version 1.0, update the web server to prevent directory traversal attacks, ensuring that input validation and sanitization are properly implemented to prevent access to arbitrary files.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-7084

Produtos afetados

Velocity Security Management System

Referências · 6

• 🔥 http://securityfocus.com/bid/30261 · Exploit
• 🔥 https://exploit-db.com/exploits/6151 · Exploit
• 🔥 http://osvdb.org/51464 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-7084 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43867 · Nota
• http://securityfocus.com/archive/1/494422/100/0/threaded · Nota