PT-2015-3621
CVE-2014-100015
·
تاريخ النشر
2015-01-13
·
تاريخ التحديث
2017-09-08
الوصف من
CVSS 2.0
6.4
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
SolidWorks Workgroup PDM version 2014
Description
The issue allows remote attackers to write to arbitrary files via a .. (dot dot) in the filename in a file upload, potentially leading to unauthorized file modifications.
Recommendations
For SolidWorks Workgroup PDM version 2014, consider restricting file upload capabilities to trusted sources until a fix is available. As a temporary workaround, implement strict validation and sanitization of filenames to prevent directory traversal attacks.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾