PT-2018-6849
CVE-2017-18354
·
Publicado
2018-12-17
·
Atualizado
2019-01-04
Descrição por
CVSS 3.1
7.5
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Rendertron version 1.0.0
Description:
The issue allows for the use of alternative protocols, such as
file://, which introduces a Local File Inclusion bug. This enables a remote attacker to read arbitrary files.Recommendations:
For Rendertron version 1.0.0, consider disabling the use of alternative protocols, such as
file://, to prevent exploitation of the Local File Inclusion bug until a patch is available. Restrict access to sensitive files and directories to minimize the risk of arbitrary file reading.Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾