PT-2013-5454 · Esri · Esri Arcgis For Server

Roberto Suggi Liverani · CVE-2013-5221 · Publicado 2013-09-24 · Atualizado 2024-07-11

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Esri ArcGIS for Server versions 10.1 through 10.2

Description The mobile-upload feature in Esri ArcGIS for Server allows remote authenticated users to upload .exe files by leveraging publisher or administrator privileges.

Recommendations For versions 10.1 through 10.2, consider restricting the mobile-upload feature to prevent unauthorized file uploads until a fix is available. As a temporary workaround, consider disabling the mobile-upload feature for users with publisher or administrator privileges to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2013-5221

Produtos afetados

Esri Arcgis For Server

Referências · 4

• https://t.me/cvenotify/85925 · Publicação no Telegram
• http://support.esri.com/en/downloads/patches-servicepacks/view/productid/66/metaid/2009 · Aviso do Fabricante
• http://support.esri.com/en/knowledgebase/techarticles/detail/41497 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-5221 · Nota de Segurança