PT-2012-5709 · Axway · Axway Securetransport

Seba_Dtt + 1 · Publicado 2012-12-13 · Atualizado 2012-12-13 · CVE-2012-4991

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Axway SecureTransport versions 5.1 SP2 and earlier

Description The issue allows remote authenticated users to perform various unauthorized actions, including reading, deleting, or creating files, as well as listing directories. This is achieved by using a ..%5C (encoded dot dot backslash) in a URI, which enables directory traversal.

Recommendations For Axway SecureTransport versions 5.1 SP2 and earlier, update to a version later than 5.1 SP2 to resolve the issue.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2012-4991

Produtos afetados

Axway Securetransport

Referências · 4

• 🔥 https://exploit-db.com/exploits/23324 · Exploit
• 🔥 http://exploit-db.com/exploits/23324 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-4991 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4991 · Nota