PT-2018-8926 · Sitebridge · Joruri Gw

Shoji Baba · Published 2018-05-14 · Updated 2018-06-19 · CVE-2018-0568

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SiteBridge Inc. Joruri Gw versions 3.2.0 and earlier

Description The issue allows remote authenticated users to execute arbitrary PHP code.

Recommendations For versions 3.2.0 and earlier, update to a version later than 3.2.0 to resolve the issue.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2018-0568

Affected Products

Joruri Gw

References · 4

• https://osv.dev/vulnerability/CVE-2018-0568 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0568 · Security Note
• https://github.com/joruri/joruri-gw/blob/master/doc/INSTALL.txt · Note
• http://jvn.jp/en/jp/JVN95589314/index.html · Note