PT-2017-13924 · Horde · Horde Groupware+1

Publicado 2017-10-11 · Atualizado 2020-08-29 · CVE-2017-15235

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Horde Groupware version 5.2.21 with the File Manager (gollem) module 3.0.11

Description The issue allows remote attackers to bypass authentication for file downloads. This is achieved by using a crafted fn parameter that corresponds to the exact filename.

Recommendations For Horde Groupware version 5.2.21 with the File Manager (gollem) module 3.0.11, consider restricting access to the fn parameter in the affected API endpoint until a patch is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-425

Identificadores relacionados

CVE-2017-15235

DLA-2352-1

Produtos afetados

File Manager

Horde Groupware

Referências · 12

• 🔥 https://blogs.securiteam.com/index.php/archives/3454 · Exploit
• 🔥 https://exploit-db.com/exploits/44059 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2017-15235 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-15235 · Nota de Segurança
• https://lists.debian.org/debian-lts-announce/2020/08/msg00050.html · Nota
• https://osv.dev/vulnerability/CVE-2017-15235 · Aviso do Fabricante
• https://osv.dev/vulnerability/DLA-2352-1 · Aviso do Fabricante
• https://packages.debian.org/src:php-horde-gollem · Nota
• https://security-tracker.debian.org/tracker/DLA-2352-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-15235 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/source-package/php-horde-gollem · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15235 · Nota de Segurança