PT-2019-6987 · Yingzhi · Yingzhi Python Programming Language

Larry W. Cashdollar + 1 · Publicado 2019-02-15 · Atualizado 2019-02-21 · CVE-2013-5654

Positive Technologies (AI Summary)

CVSS v2.0

9.4

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions YingZhi Python Programming Language version 1.9

Description The issue allows for arbitrary anonymous uploads to the phone's storage.

Recommendations For version 1.9, consider restricting access to the upload functionality until a patch is available.

Exploit

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2013-5654

Produtos afetados

Yingzhi Python Programming Language

Referências · 3

• 🔥 http://vapidlabs.com/advisory.php?v=94 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-5654 · Nota de Segurança
• http://iphoneappstorm.com/iphone-apps/utilities/com.yingzhi.python/yingzhipython.php?id=493505744 · Nota