PT-2007-3957 · Efilecabinet · Efilecabinet

Published 2007-05-13 · Updated 2018-10-16 · CVE-2007-2638

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions eFileCabinet version 3.3

Description The issue allows remote attackers to bypass authentication and access restricted portions of the interface via an invalid filecabinetnumber. This can be leveraged to obtain sensitive information or create new data structures.

Recommendations For eFileCabinet version 3.3, consider restricting access to the interface until a fix is available, and avoid using invalid filecabinetnumber values to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2007-2638

Affected Products

Efilecabinet

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-2638 · Security Note
• http://securityreason.com/securityalert/2696 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34251 · Note
• http://osvdb.org/34774 · Note
• http://securityfocus.com/archive/1/468314/100/0/threaded · Note
• http://securityfocus.com/bid/23944 · Note