PT-2018-11776 · Terramaster · Terramaster Tos

Publicado 2018-11-27 · Atualizado 2019-10-03 · CVE-2018-13356

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TerraMaster TOS version 3.1.03

Description The issue is related to incorrect access control on the ajaxdata.php file, which allows attackers to elevate user permissions.

Recommendations For TerraMaster TOS version 3.1.03, update to a version that fixes the incorrect access control issue on the ajaxdata.php file.

Exploit

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2018-13356

Produtos afetados

Terramaster Tos

Referências · 3

• 🔥 https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a · Exploit
• https://osv.dev/vulnerability/CVE-2018-13356 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-13356 · Nota de Segurança