PT-2018-11104 · Asustor · Asustor Adm

Publicado 2018-12-04 · Atualizado 2018-12-27 · CVE-2018-12306

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ASUSTOR ADM version 3.1.1

Description A directory traversal issue in the File Explorer component allows attackers to view arbitrary files by modifying the file1 URL parameter. This issue is similar to a previously known problem.

Recommendations For ASUSTOR ADM version 3.1.1, avoid using the file1 parameter in the affected URL until the issue is resolved. Consider restricting access to the File Explorer component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2018-12306

Produtos afetados

Asustor Adm

Referências · 3

• 🔥 https://blog.securityevaluators.com/over-a-dozen-vulnerabilities-discovered-in-asustor-as-602t-8dd5832a82cc · Exploit
• https://osv.dev/vulnerability/CVE-2018-12306 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-12306 · Nota de Segurança