PT-2015-3799
CVE-2014-5370
·
تاريخ النشر
2015-04-21
·
تاريخ التحديث
2016-08-18
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
New Atlanta BlueDragon versions prior to 7.1.1.18527
Description
The issue allows remote attackers to potentially read or delete arbitrary files due to a directory traversal vulnerability in the CFChart servlet. This is achieved by including a .. (dot dot) in the QUERY STRING to cfchart.cfchart.
Recommendations
For versions prior to 7.1.1.18527, update to version 7.1.1.18527 or later to resolve the issue. As a temporary workaround, consider restricting access to the CFChart servlet to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾