PT-2009-2553 · Velocity · Velocity Security Management System

Published 2009-08-26 · Updated 2018-10-11 · CVE-2008-7084

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Velocity Security Management System version 1.0

Description A directory traversal issue in the web server allows remote attackers to read arbitrary files by including a .. (dot dot) in the URI.

Recommendations For version 1.0, update the web server to prevent directory traversal attacks, ensuring that input validation and sanitization are properly implemented to prevent access to arbitrary files.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-7084

Affected Products

Velocity Security Management System

References · 6

• 🔥 http://securityfocus.com/bid/30261 · Exploit
• 🔥 https://exploit-db.com/exploits/6151 · Exploit
• 🔥 http://osvdb.org/51464 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-7084 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43867 · Note
• http://securityfocus.com/archive/1/494422/100/0/threaded · Note