PT-2023-10222 · Unknown · Abreen Apollo

Published 2023-01-14 · Updated 2024-05-17 · CVE-2015-10043

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Medium

Base vector

AV:A/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions abreen Apollo (affected versions not specified)

Description A critical vulnerability was found in abreen Apollo, affecting an unknown part. The manipulation of the file argument leads to path traversal.

Recommendations To fix this issue, it is recommended to apply the patch named 6206406630780bbd074aff34f4683fb764faba71. As a temporary workaround, consider restricting access to the file argument to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2015-10043

Affected Products

Abreen Apollo

References · 7

• https://github.com/abreen/Apollo/commit/6206406630780bbd074aff34f4683fb764faba71 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-10043 · Security Note
• https://t.me/cvenotify/42028 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-10043 · Note
• https://t.me/cibsecurity/56511 · Telegram Post
• https://vuldb.com/?id.218307 · Note
• https://vuldb.com/?ctiid.218307 · Note