PT-2020-7872
CVE-2015-5952
·
Published
2020-01-15
·
Updated
2020-01-22
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Thomson Reuters for FATCA versions prior to 5.2
Description:
The issue allows remote attackers to execute arbitrary files. This is achieved via the
item parameter.Recommendations:
For versions prior to 5.2, update to version 5.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the
item parameter to minimize the risk of exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾