PT-2012-3928

CVE-2012-2289

·

Published

2012-08-26

·

Updated

2013-02-14

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions EMC ApplicationXtender Desktop versions prior to 6.5 SP2 EMC ApplicationXtender Web Access .NET versions prior to 6.5 SP2
Description The issue allows remote attackers to upload files to any location and possibly execute arbitrary code via unspecified vectors.
Recommendations For EMC ApplicationXtender Desktop versions prior to 6.5 SP2, update to version 6.5 SP2 or later. For EMC ApplicationXtender Web Access .NET versions prior to 6.5 SP2, update to version 6.5 SP2 or later.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2012-2289
ZDI-12-179
ZDI-12-182
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com