PT-2017-7374 · Lvrtc · Lvrtc Eparakstitajs

Publicado 2017-04-10 · Atualizado 2017-04-13 · CVE-2015-8275

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions LVRTC eParakstitajs version 3.0 (1.3.0) edoc-libraries version 2.5.4 01

Description The issue allows attackers to write to arbitrary files by using crafted EDOC files.

Recommendations For LVRTC eParakstitajs version 3.0 (1.3.0), update to a version that fixes the issue with crafted EDOC files. For edoc-libraries version 2.5.4 01, update to a version that fixes the issue with crafted EDOC files.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2015-8275

Produtos afetados

Lvrtc Eparakstitajs

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-8275 · Nota de Segurança
• https://cert.lv/en/2016/01/new-cve-information-avialable · Nota