PT-2019-13560 · Temenos · T24

Bourbon Jean-Marie + 1 · Publicado 2019-12-09 · Atualizado 2019-12-18 · CVE-2019-14251

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions T24 in TEMENOS Channels version R15.01

Description An issue was discovered where the login page presents JavaScript functions to access a document on the server once successfully authenticated. However, an attacker can leverage the downloadDocServer() function to traverse the file system and access files or directories that are outside of the restricted directory. This is possible because WealthT24/GetImage is used with the docDownloadPath and uploadLocation parameters.

Recommendations For T24 in TEMENOS Channels version R15.01, consider restricting access to the downloadDocServer() function until a patch is available. Additionally, restrict the use of the docDownloadPath and uploadLocation parameters in the WealthT24/GetImage to minimize the risk of exploitation.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2019-14251

Produtos afetados

T24

Referências · 3

• 🔥 https://github.com/kmkz/exploit/blob/master/CVE-2019-14251-TEMENOS-T24.txt · Exploit
• https://osv.dev/vulnerability/CVE-2019-14251 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-14251 · Nota de Segurança