PT-2022-11452 · Unknown · Batflat Cms

0Xosmia · Published 2022-03-01 · Updated 2022-03-09 · CVE-2021-41652

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions BatFlat CMS version 1.3.6

Description Insecure permissions in the file database.sdb allow attackers to dump the entire database.

Recommendations For BatFlat CMS version 1.3.6, consider changing the permissions of the database.sdb file to prevent unauthorized access until a patch is available.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2021-41652

Affected Products

Batflat Cms

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-41652 · Security Note
• https://osv.dev/vulnerability/CVE-2021-41652 · Vendor Advisory
• https://github.com/sruupl/batflat/issues/113 · Note
• https://deathflash1411.github.io/blog/dumping-batflat-cms-database · Note
• https://t.me/cvenotify/27586 · Telegram Post