PT-2018-3120 · Galaktika · Galaktika Erp

Publicado 2018-12-15 · Atualizado 2018-12-15

Positive Technologies (AI Summary)

CVSS v2.0

7.0

Alta

Vetor base

AV:N/AC:M/Au:S/C:C/I:P/A:N

Name of the Vulnerable Software and Affected Versions Galaktika ERP (affected versions not specified)

Description The issue is related to architectural weaknesses in components (*.res files) of the Galaktika ERP system, which have the functionality to export to XML files. Exploitation of this issue may allow a remote attacker to read or overwrite arbitrary files on the server by specifying the path to them in the Каталог and Файл fields.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-73

Identificadores relacionados

BDU:2019-04155

Produtos afetados

Galaktika Erp

Referências · 1

• https://bdu.fstec.ru/vul/2019-04155 · Nota de Segurança