Cogent DataHub Unspecified Directory Traversal Vulnerability
BID:67772
Info
Cogent DataHub Unspecified Directory Traversal Vulnerability
| Bugtraq ID: | 67772 |
| Class: | Unknown |
| CVE: |
CVE-2014-2352 |
| Remote: | Yes |
| Local: | No |
| Published: | May 29 2014 12:00AM |
| Updated: | Mar 19 2015 08:31AM |
| Credit: | Alain Homewood |
| Vulnerable: |
Cogentdatahub Cogent DataHub 7.3.5 |
| Not Vulnerable: | |
Discussion
Cogent DataHub Unspecified Directory Traversal Vulnerability
Cogent DataHub is prone to an unspecified directory-traversal vulnerability.
Remote attackers can use specially crafted requests with directory-traversal sequences ('../') to retrieve arbitrary files in the context of the application.
Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks.
Cogent DataHub 7.3.5 is vulnerable; other versions may also be affected.
Cogent DataHub is prone to an unspecified directory-traversal vulnerability.
Remote attackers can use specially crafted requests with directory-traversal sequences ('../') to retrieve arbitrary files in the context of the application.
Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks.
Cogent DataHub 7.3.5 is vulnerable; other versions may also be affected.
Exploit / POC
Cogent DataHub Unspecified Directory Traversal Vulnerability
Attackers can exploit this issue with a web browser or readily available tools.
Attackers can exploit this issue with a web browser or readily available tools.
Solution / Fix
Cogent DataHub Unspecified Directory Traversal Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cogent DataHub Unspecified Directory Traversal Vulnerability
References:
References:
- Cogent Datahub Homepage (Cogent)
- Cogent DataHub Vulnerabilities (ICS-CERT)