CTERA Portal Multiple Security Vulnerabilities

Bugtraq ID:	60343
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jun 05 2013 12:00AM
Updated:	Jun 05 2013 12:00AM
Credit:	SEC Consult Vulnerability Lab
Vulnerable:
Not Vulnerable:

CTERA Portal Multiple Security Vulnerabilities

CTERA Portal is prone to multiple security vulnerabilities.

An attacker may leverage these issues to bypass certain security restrictions, disclose sensitive information, or inject hostile HTML and script code that would run in the context of the affected site, potentially allowing an attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user.

CTERA Portal 3.1 is vulnerable; other versions may also be affected.

CTERA Portal Multiple Security Vulnerabilities

The researcher who discovered these issues has created a proof of concept. This proof of concept is not otherwise publicly available or known to be circulating in the wild.

CTERA Portal Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

CTERA Portal Multiple Security Vulnerabilities

References:

• CTERA Portal Homepage (CTERA Networks)
  
• Multiple vulnerabilities in CTERA Portal (SEC Consult Vulnerability Lab)