PT-2012-3584 · Ajaxplorer · Ajaxplorer

Stenoplasma · Publicado 2012-03-22 · Atualizado 2018-01-10 · CVE-2012-1840

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AjaXplorer versions 3.2.x through 3.2.4 AjaXplorer versions 4.0.x through 4.0.3

Description The issue is related to improper cookie authentication, allowing remote attackers to gain login access by exploiting knowledge of a password hash.

Recommendations For versions 3.2.x through 3.2.4, update to version 3.2.5 or later. For versions 4.0.x through 4.0.3, update to version 4.0.4 or later.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2012-1840

Produtos afetados

Ajaxplorer

Referências · 4

• http://ajaxplorer.info/ajaxplorer-4-0-4 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-1840 · Nota de Segurança
• http://kb.cert.org/vuls/id/504019 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74305 · Nota