PT-2014-6484
CVE-2014-5454
·
تاريخ النشر
2014-08-25
·
تاريخ التحديث
2017-09-08
الوصف من
CVSS 2.0
6.0
متوسطةالمقاييسAV:N/AC:M/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
SAS Visual Analytics version 6.4M1
Description
The issue concerns an unrestricted file upload vulnerability in the image upload module. This allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and then accessing it.
Recommendations
For SAS Visual Analytics version 6.4M1, consider restricting access to the image upload module until a fix is available, and avoid uploading files with executable extensions to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾