PT-2015-1379
CVE-2015-0171
·
تاريخ النشر
2015-05-25
·
تاريخ التحديث
2015-05-26
الوصف من
CVSS 2.0
5.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
IBM Security SiteProtector System versions 3.0 through 3.0.0.6
IBM Security SiteProtector System versions 3.1 through 3.1.0.3
IBM Security SiteProtector System versions 3.1.1 through 3.1.1.1
Description
The issue allows remote authenticated users to write to arbitrary files. This is due to incorrect restriction of the directory path name with limited access. Exploitation of the issue may allow a remote attacker to record arbitrary files.
Recommendations
For IBM Security SiteProtector System versions 3.0 through 3.0.0.6, update to version 3.0.0.7.
For IBM Security SiteProtector System versions 3.1 through 3.1.0.3, update to version 3.1.0.4.
For IBM Security SiteProtector System versions 3.1.1 through 3.1.1.1, update to version 3.1.1.2.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾