PT-2017-7896 · Atutorspaces · Atutor

Published 2017-07-22 · Updated 2017-07-26 · CVE-2016-10400

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ATutor versions prior to 2.2.2

Description A Directory Traversal issue exists, allowing an attacker to read arbitrary files. This can be achieved by exploiting the icon parameter in the /mods/ core/courses/users/create course.php endpoint, and then visiting the get course icon.php endpoint with a specially crafted id parameter after the traversal attack.

Recommendations For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the create course.php and get course icon.php endpoints to minimize the risk of exploitation. Avoid using the icon parameter in the affected endpoint until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2016-10400

Affected Products

Atutor

References · 5

• 🔥 https://htbridge.com/advisory/HTB23297 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2016-10400 · Security Note
• https://osv.dev/vulnerability/CVE-2016-10400 · Vendor Advisory
• https://github.com/atutor/ATutor/releases/tag/atutor_2_2_2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10400 · Note