PT-2017-5772 · Apache · Apache Cordova File-Transfer Plugin+1

Published 2017-10-30 · Updated 2018-10-09 · CVE-2014-0072

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Apache Cordova File-Transfer plugin versions prior to 0.4.2 for iOS Cordova versions 2.4.0 through 2.9.0 for iOS

Description: The issue allows remote attackers to spoof SSL servers by leveraging a default value of true for the trustAllHosts option in the Apache Cordova File-Transfer plugin. This could potentially lead to man-in-the-middle attacks.

Recommendations: For Apache Cordova File-Transfer plugin versions prior to 0.4.2 for iOS, update to version 0.4.2 or later. For Cordova versions 2.4.0 through 2.9.0 for iOS, consider updating to a version outside of this range or modifying the trustAllHosts option to false as a temporary workaround.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2014-0072

Affected Products

Apache Cordova File-Transfer Plugin

Cordova

References · 7

• https://github.com/apache/cordova-plugin-file-transfer/commit/a1d6fc07e8a40c1b2b16f4103c403b30e1089668 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0072 · Security Note
• https://mail-archives.apache.org/mod_mbox/cordova-dev/201403.mbox/%3CCAK_TSXKL9JtkehHC0jEoRwdvVKXt-d5uj40EwNY-Gk3ttX=wJw%40mail.gmail.com%3E · Note
• http://securityfocus.com/archive/1/531335/100/0/threaded · Note
• http://d3adend.org/blog/?p=403 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91561 · Note
• http://seclists.org/fulldisclosure/2014/Mar/29 · Note