PT-2012-5709 · Axway · Axway Securetransport

Seba_Dtt + 1 · Published 2012-12-13 · Updated 2012-12-13 · CVE-2012-4991

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Axway SecureTransport versions 5.1 SP2 and earlier

Description The issue allows remote authenticated users to perform various unauthorized actions, including reading, deleting, or creating files, as well as listing directories. This is achieved by using a ..%5C (encoded dot dot backslash) in a URI, which enables directory traversal.

Recommendations For Axway SecureTransport versions 5.1 SP2 and earlier, update to a version later than 5.1 SP2 to resolve the issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2012-4991

Affected Products

Axway Securetransport

References · 4

• 🔥 https://exploit-db.com/exploits/23324 · Exploit
• 🔥 http://exploit-db.com/exploits/23324 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-4991 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4991 · Note