CoSoSys Endpoint Protector Multiple Security Vulnerabilities
BID:67565
Info
CoSoSys Endpoint Protector Multiple Security Vulnerabilities
| Bugtraq ID: | 67565 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-3932 |
| Remote: | Yes |
| Local: | No |
| Published: | May 21 2014 12:00AM |
| Updated: | Jun 09 2014 12:12AM |
| Credit: | Stefan Viehböck |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
CoSoSys Endpoint Protector Multiple Security Vulnerabilities
CoSoSys Endpoint Protector is prone to an SQL-injection vulnerability and multiple information-disclosure vulnerabilities because it fails to sufficiently sanitize user-supplied input.
An attacker can exploit these vulnerabilities to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database and obtain sensitive information that may aid in further attacks.
CoSoSys Endpoint Protector 4.3.0.4 is vulnerable; other versions may also be affected.
CoSoSys Endpoint Protector is prone to an SQL-injection vulnerability and multiple information-disclosure vulnerabilities because it fails to sufficiently sanitize user-supplied input.
An attacker can exploit these vulnerabilities to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database and obtain sensitive information that may aid in further attacks.
CoSoSys Endpoint Protector 4.3.0.4 is vulnerable; other versions may also be affected.
Exploit / POC
CoSoSys Endpoint Protector Multiple Security Vulnerabilities
Attackers can exploit these issues using a web browser.
Attackers can exploit these issues using a web browser.
Solution / Fix
CoSoSys Endpoint Protector Multiple Security Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
CoSoSys Endpoint Protector Multiple Security Vulnerabilities
References:
References: