PT-2010-1615 · Digital Interchange · Digital Interchange Document Library

Byalbayx · Publicado 2010-04-23 · Atualizado 2017-09-19 · CVE-2009-4806

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Digital Interchange Document Library version 1.0.1

Description The issue concerns a lack of administrative authentication in the admin/save user.asp file, allowing remote attackers to access or modify the administrator's credentials.

Recommendations For Digital Interchange Document Library version 1.0.1, consider implementing proper administrative authentication mechanisms to restrict access to sensitive areas like admin/save user.asp. As a temporary workaround, restrict access to the admin/save user.asp file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2009-4806

Produtos afetados

Digital Interchange Document Library

Referências · 6

• 🔥 http://exploit-db.com/exploits/8130 · Exploit
• 🔥 https://exploit-db.com/exploits/8130 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49018 · Nota
• http://secunia.com/advisories/34129 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-4806 · Nota de Segurança
• http://securityfocus.com/bid/33983 · Nota