PT-2013-1760 · Olive Toast · Olive Toast Documents Pro File Viewer

Keigo Yamazaki · Publicado 2013-01-19 · Atualizado 2013-01-29 · CVE-2012-5185

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Olive Toast Documents Pro File Viewer (formerly Files HD) versions prior to 1.11.1

Description The issue allows remote attackers to read or delete files by leveraging guest access, due to a directory traversal vulnerability in the app.

Recommendations For versions prior to 1.11.1, update to version 1.11.1 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2012-5185

Produtos afetados

Olive Toast Documents Pro File Viewer

Referências · 4

• http://jvn.jp/en/jp/JVN52197991/index.html · Nota
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000002 · Nota
• https://itunes.apple.com/us/app/documents-pro/id374142847 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-5185 · Nota de Segurança