PT-2017-7896 · Atutorspaces · Atutor

Publicado 2017-07-22 · Atualizado 2017-07-26 · CVE-2016-10400

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ATutor versions prior to 2.2.2

Description A Directory Traversal issue exists, allowing an attacker to read arbitrary files. This can be achieved by exploiting the icon parameter in the /mods/ core/courses/users/create course.php endpoint, and then visiting the get course icon.php endpoint with a specially crafted id parameter after the traversal attack.

Recommendations For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the create course.php and get course icon.php endpoints to minimize the risk of exploitation. Avoid using the icon parameter in the affected endpoint until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2016-10400

Produtos afetados

Atutor

Referências · 5

• 🔥 https://htbridge.com/advisory/HTB23297 · Exploit
• https://github.com/atutor/ATutor/releases/tag/atutor_2_2_2 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10400 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-10400 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-10400 · Aviso do Fabricante