PT-2017-13924 · Horde · Horde Groupware+1

Published 2017-10-11 · Updated 2020-08-29 · CVE-2017-15235

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Horde Groupware version 5.2.21 with the File Manager (gollem) module 3.0.11

Description The issue allows remote attackers to bypass authentication for file downloads. This is achieved by using a crafted fn parameter that corresponds to the exact filename.

Recommendations For Horde Groupware version 5.2.21 with the File Manager (gollem) module 3.0.11, consider restricting access to the fn parameter in the affected API endpoint until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-425

Related Identifiers

CVE-2017-15235

DLA-2352-1

Affected Products

File Manager

Horde Groupware

References · 12

• 🔥 https://blogs.securiteam.com/index.php/archives/3454 · Exploit
• 🔥 https://exploit-db.com/exploits/44059 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2017-15235 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-15235 · Security Note
• https://osv.dev/vulnerability/CVE-2017-15235 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2352-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DLA-2352-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-15235 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/php-horde-gollem · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15235 · Security Note
• https://lists.debian.org/debian-lts-announce/2020/08/msg00050.html · Note
• https://packages.debian.org/src:php-horde-gollem · Note