PT-2017-3637 · Oracle+1 · Javastart.Jar+1

Published 2017-08-11 · Updated 2018-10-09 · CVE-2017-12815

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Bomgar Remote Support Portal versions 52790 and earlier

Description: The issue exists due to insufficient restriction of the directory path name with limited access in the JavaStart.jar component of the Bomgar Remote Support Portal. This allows a remote attacker to create, modify, or delete arbitrary files. The JavaStart.jar applet can be downloaded from a Bomgar Remote Support Portal deployment and called from an arbitrary website using object and/or applet HTML tags. Successful exploitation results in file creation, modification, or deletion in the operating system with the privileges of the user who ran the Java applet.

Recommendations: For versions 52790 and earlier, consider restricting access to the JavaStart.jar applet until a patch is available. As a temporary workaround, avoid using the JavaStart.jar applet from untrusted sources to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2018-00701

CVE-2017-12815

Affected Products

Bomgar Remote Support Portal

Javastart.Jar

References · 4

• https://bdu.fstec.ru/vul/2018-00701 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-12815 · Security Note
• http://securityfocus.com/archive/1/541885/100/0/threaded · Note
• http://securityfocus.com/archive/1/archive/1/541885/100/0/threaded · Note