PT-2019-13560 · Temenos · T24

Bourbon Jean-Marie + 1 · Published 2019-12-09 · Updated 2019-12-18 · CVE-2019-14251

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions T24 in TEMENOS Channels version R15.01

Description An issue was discovered where the login page presents JavaScript functions to access a document on the server once successfully authenticated. However, an attacker can leverage the downloadDocServer() function to traverse the file system and access files or directories that are outside of the restricted directory. This is possible because WealthT24/GetImage is used with the docDownloadPath and uploadLocation parameters.

Recommendations For T24 in TEMENOS Channels version R15.01, consider restricting access to the downloadDocServer() function until a patch is available. Additionally, restrict the use of the docDownloadPath and uploadLocation parameters in the WealthT24/GetImage to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2019-14251

Affected Products

T24

References · 3

• 🔥 https://github.com/kmkz/exploit/blob/master/CVE-2019-14251-TEMENOS-T24.txt · Exploit
• https://osv.dev/vulnerability/CVE-2019-14251 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14251 · Security Note