PT-2015-4228

CVE-2014-9466

·

Publicado

2015-02-17

·

Atualizado

2018-10-09

Descrição por

CVSS 2.0
4.0
Média
MétricasAV:N/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Open-Xchange (OX) AppSuite and Server versions prior to 7.4.2-rev42 Open-Xchange (OX) AppSuite and Server version 7.6.0 prior to 7.6.0-rev36 Open-Xchange (OX) AppSuite and Server version 7.6.1 prior to 7.6.1-rev14
Description The issue is related to improper handling of directory permissions, allowing remote authenticated users to read files via unspecified vectors. This is related to the folder identifier.
Recommendations For versions prior to 7.4.2-rev42, update to version 7.4.2-rev42 or later. For version 7.6.0 prior to 7.6.0-rev36, update to version 7.6.0-rev36 or later. For version 7.6.1 prior to 7.6.1-rev14, update to version 7.6.1-rev14 or later.
Explorabilidade
Correção
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-264
Identificadores relacionados
CVE-2014-9466
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com