PT-2017-12035 · Idera · Idera Uptime Monitor

Published 2017-07-20 · Updated 2017-07-24 · CVE-2017-11469

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IDERA Uptime Monitor version 7.8

Description The issue concerns directory traversal in the file name parameter of the "get2post.php" file.

Recommendations For IDERA Uptime Monitor version 7.8, consider restricting access to the get2post.php file or avoid using the file name parameter until a fix is available.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2017-11469

Affected Products

Idera Uptime Monitor

References · 4

• 🔥 https://exploit-db.com/exploits/44071 · Exploit
• 🔥 https://blogs.securiteam.com/index.php/archives/3223#more-3223 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-11469 · Security Note
• https://osv.dev/vulnerability/CVE-2017-11469 · Vendor Advisory