eFront Arbitrary File Upload and Information Disclosure Vulnerabilities
BID:64545
Info
eFront Arbitrary File Upload and Information Disclosure Vulnerabilities
| Bugtraq ID: | 64545 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 18 2013 12:00AM |
| Updated: | Dec 18 2013 12:00AM |
| Credit: | expl0i13r |
| Vulnerable: |
eFront eFront 3.6.14 |
| Not Vulnerable: |
eFront eFront 3.6.14.2 build 18013 |
Discussion
eFront Arbitrary File Upload and Information Disclosure Vulnerabilities
eFront is prone to an information disclosure vulnerability and an arbitrary file-upload vulnerability.
An attacker can exploit these issues to upload arbitrary files in the context of the web server process or gain access to sensitive information that may aid in further attacks.
eFront is prone to an information disclosure vulnerability and an arbitrary file-upload vulnerability.
An attacker can exploit these issues to upload arbitrary files in the context of the web server process or gain access to sensitive information that may aid in further attacks.
Solution / Fix
eFront Arbitrary File Upload and Information Disclosure Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information
Solution:
Updates are available. Please see the references or vendor advisory for more information
References
eFront Arbitrary File Upload and Information Disclosure Vulnerabilities
References:
References:
- eFront Homepage (eFront)