PT-2012-2498 · Estrongs · Es File Explorer

Masafumi Horimoto + 1 · Publicado 2012-03-05 · Atualizado 2014-03-20 · CVE-2012-0322

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions EStrongs ES File Explorer versions 1.6.0.2 through 1.6.1.1

Description The issue allows remote attackers to read arbitrary files due to improper access restriction. This is achieved via vectors involving an unspecified function.

Recommendations For versions 1.6.0.2 through 1.6.1.1, consider restricting access to sensitive files and directories until a patch is available. As a temporary workaround, restrict access to the application's file system to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-0322

Produtos afetados

Es File Explorer

Referências · 3

• http://jvndb.jvn.jp/jvndb/JVNDB-2012-000020 · Nota
• http://jvn.jp/en/jp/JVN08871006/index.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0322 · Nota de Segurança