PT-2014-3705

CVE-2014-0607

·

Published

2014-07-24

·

Updated

2014-07-30

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Attachmate Verastream Process Designer versions prior to R6 SP1 Hotfix 1
Description The issue allows remote attackers to execute arbitrary code by uploading and launching an executable file due to an unrestricted file upload vulnerability.
Recommendations For versions prior to R6 SP1 Hotfix 1, update to R6 SP1 Hotfix 1 or later to resolve the issue. As a temporary workaround, consider restricting file upload capabilities to prevent the execution of arbitrary code.
Exploitability
Fix
Vendors
Affected products
Related identifiers
ZDI-14-269
Found an issue in the description? Have something to add? Feel free to write us 👾