PT-2012-3311 · Six Apart · Movable Type

Published 2012-03-03 · Updated 2018-01-18 · CVE-2012-1497

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Movable Type versions prior to 4.38 Movable Type versions 5.0x prior to 5.07 Movable Type versions 5.1x prior to 5.13

Description The issue allows remote authenticated users to conduct directory traversal attacks and read arbitrary files by leveraging the template-designer role, due to the default configuration supporting the mt:Include file= attribute.

Recommendations For versions prior to 4.38, update to version 4.38 or later. For versions 5.0x prior to 5.07, update to version 5.07 or later. For versions 5.1x prior to 5.13, update to version 5.13 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2012-1497

DSA-2423-1

Affected Products

Movable Type

References · 4

• http://movabletype.org/2012/02/movable_type_513_507_and_438_security_updates.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-1497 · Security Note
• http://movabletype.org/documentation/appendices/release-notes/513.html · Vendor Advisory
• http://debian.org/security/2012/dsa-2423 · Vendor Advisory