Alfresco Community Edition Multiple Security Vulnerabilities
BID:68663
Info
Alfresco Community Edition Multiple Security Vulnerabilities
| Bugtraq ID: | 68663 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 16 2014 12:00AM |
| Updated: | Jul 16 2014 12:00AM |
| Credit: | V. Paulikas of SEC Consult Vulnerability Lab |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Alfresco Community Edition Multiple Security Vulnerabilities
Alfresco Community Edition is prone to multiple security vulnerabilities.
An attacker may leverage these issues to gain sensitive information or bypass certain security restrictions.
Alfresco Community Edition 4.2.f and earlier are vulnerable.
Alfresco Community Edition is prone to multiple security vulnerabilities.
An attacker may leverage these issues to gain sensitive information or bypass certain security restrictions.
Alfresco Community Edition 4.2.f and earlier are vulnerable.
Exploit / POC
Alfresco Community Edition Multiple Security Vulnerabilities
An attacker can use a web browser to exploit some of these issues.
The following example URIs are available:
http://www.example.com/alfresco/proxy?endpoint=http://internal_system:port
http://www.example.com/alfresco/cmisbrowser?url=http://internal_system:port
An attacker can use a web browser to exploit some of these issues.
The following example URIs are available:
http://www.example.com/alfresco/proxy?endpoint=http://internal_system:port
http://www.example.com/alfresco/cmisbrowser?url=http://internal_system:port
Solution / Fix
Alfresco Community Edition Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Alfresco Community Edition Multiple Security Vulnerabilities
References:
References: