PT-2017-11523 · Malion · Malion For Mac+2

Muneaki Nishimura · Publicado 2017-08-04 · Atualizado 2017-08-15 · CVE-2017-10815

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MaLion for Windows versions 5.2.1 and earlier MaLion for Mac versions 4.0.1 through 5.2.1

Description The issue allows remote attackers to bypass authentication and execute arbitrary commands or operations on Terminal Agent when the "Remote Control" component is installed.

Recommendations For MaLion for Windows versions 5.2.1 and earlier, uninstall or disable the "Remote Control" component until a fix is available. For MaLion for Mac versions 4.0.1 through 5.2.1, uninstall or disable the "Remote Control" component until a fix is available.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2017-10815

Produtos afetados

Malion For Mac

Malion For Windows

Terminal Agent

Referências · 4

• https://jvn.jp/en/vu/JVNVU91587298/index.html · Nota
• http://intercom.co.jp/information/2017/0801.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-10815 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-10815 · Aviso do Fabricante