PT-2020-7212 · Gateway Geomatics · Mapserver

Published 2020-01-09 · Updated 2020-01-22 · CVE-2012-2950

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Gateway Geomatics MapServer for Windows versions prior to 3.0.6

Description The issue allows remote attackers to execute local PHP code and obtain sensitive information due to a Local File Include Vulnerability.

Recommendations For versions prior to 3.0.6, update to version 3.0.6 or later to resolve the issue.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2012-2950

Affected Products

Mapserver

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-2950 · Security Note
• http://securityfocus.com/bid/53737 · Note
• https://t.me/cibsecurity/9094 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75983 · Note