PT-2021-24079 · Unknown · Bus Pass Management System

Published 2021-12-16 · Updated 2023-11-14 · CVE-2021-44315

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Bus Pass Management System version 1.0

Description: The issue allows an attacker to view sensitive files of the application due to Directory Listing/Browsing being enabled on the web server. This can include files containing sensitive user or server information.

Recommendations: For Bus Pass Management System version 1.0, disable Directory Listing/Browsing on the web server to prevent attackers from viewing sensitive files. Consider restricting access to sensitive files and directories to minimize the risk of exploitation.

Exploit

Fix

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

CVE-2021-44315

Affected Products

Bus Pass Management System

References · 6

• 🔥 https://github.com/abhiunix/Bus-Pass-Management-System-v1.0/blob/master/Directory%20listing/Report_Directory%20listing.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-44315 · Security Note
• https://osv.dev/vulnerability/CVE-2021-44315 · Vendor Advisory
• https://t.me/cvenotify/24766 · Telegram Post
• https://github.com/abhiunix/Bus-Pass-Management-System-v1.0/tree/master/Directory%20listing · Note
• https://t.me/cibsecurity/34164 · Telegram Post