PT-2018-2748 · Dr.Web · Dr.Web Enterprise Security Suite

Publicado

2018-12-20

·

Atualizado

2018-12-20

CVSS v2.0

7.1

Alta

VetorAV:N/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite (affected versions not specified)
Description The issue is related to a lack of restrictions on writing, reading, and creating files within the server folder. This could allow a remote attacker to execute arbitrary Lua scripts, bypassing the sandbox mechanism, by creating a specially crafted file inside the server folder.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2019-01724

Produtos afetados

Dr.Web Enterprise Security Suite