PT-2017-12035 · Idera · Idera Uptime Monitor

Publicado 2017-07-20 · Atualizado 2017-07-24 · CVE-2017-11469

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IDERA Uptime Monitor version 7.8

Description The issue concerns directory traversal in the file name parameter of the "get2post.php" file.

Recommendations For IDERA Uptime Monitor version 7.8, consider restricting access to the get2post.php file or avoid using the file name parameter until a fix is available.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2017-11469

Produtos afetados

Idera Uptime Monitor

Referências · 4

• 🔥 https://exploit-db.com/exploits/44071 · Exploit
• 🔥 https://blogs.securiteam.com/index.php/archives/3223#more-3223 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-11469 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-11469 · Aviso do Fabricante