PT-2012-6182 · Dflabs · Dflabs Ptk

Published 2012-11-17 · Updated 2017-08-29 · CVE-2012-5901

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions DFLabs PTK version 1.0.5

Description The issue allows remote attackers to read sensitive files due to insufficient access control. This can include logs, images, or reports stored in the (1) log, (2) images, or (3) report directory. Attackers can access these files by making a direct request to the file in the respective directory.

Recommendations For DFLabs PTK version 1.0.5, consider restricting access to the log, images, and report directories to minimize the risk of exploitation. As a temporary workaround, limit direct requests to files in these directories until a patch is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-5901

Affected Products

Dflabs Ptk

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2012-5901 · Security Note
• http://secunia.com/advisories/48585 · Vendor Advisory
• http://osvdb.org/80773 · Note
• http://packetstormsecurity.org/files/111360/PTK-1.0.5-Cross-Site-Scripting-Unrestricted-Access.html · Note
• http://securityfocus.com/bid/52817 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74491 · Note