PT-2014-2913 · Sharetronix · Sharetronix

Publicado 2014-06-13 · Atualizado 2017-08-29 · CVE-2013-5356

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sharetronix versions 3.1.1.3, 3.1.1, and earlier

Description The issue allows remote attackers to bypass authentication due to improper restriction of access to unspecified AJAX functionality.

Recommendations For Sharetronix versions 3.1.1.3, 3.1.1, and earlier, consider restricting access to the unspecified AJAX functionality as a temporary workaround until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-5356

Produtos afetados

Sharetronix

Referências · 6

• http://secunia.com/secunia_research/2013-12 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-5356 · Nota de Segurança
• http://securityfocus.com/bid/64102 · Nota
• http://osvdb.org/100607 · Nota
• http://secunia.com/advisories/53936 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89505 · Nota