PT-2012-6182 · Dflabs · Dflabs Ptk

Publicado 2012-11-17 · Atualizado 2017-08-29 · CVE-2012-5901

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions DFLabs PTK version 1.0.5

Description The issue allows remote attackers to read sensitive files due to insufficient access control. This can include logs, images, or reports stored in the (1) log, (2) images, or (3) report directory. Attackers can access these files by making a direct request to the file in the respective directory.

Recommendations For DFLabs PTK version 1.0.5, consider restricting access to the log, images, and report directories to minimize the risk of exploitation. As a temporary workaround, limit direct requests to files in these directories until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-5901

Produtos afetados

Dflabs Ptk

Referências · 6

• http://osvdb.org/80773 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-5901 · Nota de Segurança
• http://packetstormsecurity.org/files/111360/PTK-1.0.5-Cross-Site-Scripting-Unrestricted-Access.html · Nota
• http://securityfocus.com/bid/52817 · Nota
• http://secunia.com/advisories/48585 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74491 · Nota