PT-2018-11113

CVE-2018-12314

·

Published

2018-12-04

·

Updated

2018-12-21

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions ASUSTOR ADM version 3.1.1
Description The issue allows attackers to download arbitrary files by manipulating the file and folder URL parameters in the downloadwallpaper.cgi.
Recommendations For ASUSTOR ADM version 3.1.1, consider restricting access to the downloadwallpaper.cgi until a patch is available. Avoid using the file and folder parameters in the affected URL until the issue is resolved.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2018-12314
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com