CVE-2012-5358

Опубликовано: 30 окт. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

The XSLTCompiledTransform function in Ektron Content Management System (CMS) before 8.02 SP5 configures the XSL with enableDocumentFunction set to true, which allows remote attackers to read arbitrary files and consequently bypass authentication, modify viewstate, cause a denial of service, or possibly have unspecified other impact via crafted XSL data.

Ссылки

http://documentation.ektron.com/current/ReleaseNotes/Release8/8.02SP5.htm
Issue Tracking
Vendor Advisory
https://technet.microsoft.com/library/security/msvr12-016
Issue Tracking
Release Notes
Third Party Advisory
https://webstersprodigy.net/2012/10/25/cve-2012-5357cve-1012-5358-cool-ektron-xslt-rce-bugs/
Exploit
Issue Tracking
Third Party Advisory
http://documentation.ektron.com/current/ReleaseNotes/Release8/8.02SP5.htm
Issue Tracking
Vendor Advisory
https://technet.microsoft.com/library/security/msvr12-016
Issue Tracking
Release Notes
Third Party Advisory
https://webstersprodigy.net/2012/10/25/cve-2012-5357cve-1012-5358-cool-ektron-xslt-rce-bugs/
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ektron:ektron_content_management_system:*:sp4:*:*:*:*:*:*

Версия до 8.02 (включая)

EPSS

Процентиль: 68%

0.00577

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-19

Связанные уязвимости

GHSA-qcrh-hq25-p92m