CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
Percentile
82.5%
Agile FleetCommander and FleetCommander Kiosk were found to have multiple XSS, CSRF, information disclosure and SQLi vulnerabilities.
CWE-89: Improper Neutralization of Special Elements used in an SQL Command (βSQL Injectionβ) - CVE-2012-4941
SQL Injection Vulnerabilities: Multiple query string parameters for both authenticated and unauthenticated users are not properly sanitized before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.
CWE-79: Improper Neutralization of Input During Web Page Generation (βCross-site Scriptingβ) - CVE-2012-4942
Persistent XSS Vulnerabilities: The applicationβs web interface allows users to provide text input into many fields which are stored in a database and displayed back to the user in various places. Input passed to all text fields in the application is not properly sanitized before being displayed to users. This can be exploited to execute arbitrary HTML and script code in a userβs browser session.
CWE-352: Cross-Site Request Forgery (CSRF) - CVE-2012-4943
CSRF Vulnerabilities: The applicationβs web interface allows users to perform many actions via HTTP POST requests without performing any validity checks to verify the requests. This can be exploited to change the administratorβs/userβs passwords, creating new user accounts, deleting user accounts, granting additional site permissions, and more by tricking a logged in administrator or other user into visiting a malicious web site.
CWE-280: Improper Handling of Insufficient Permissions or Privileges - CVE-2012-4944
Unrestricted File Upload Vulnerabilities: The application has several pages that are available to unauthenticated users where arbitrary files are able to be uploaded onto the system. This can be exploited to upload arbitrary files to the system and could be used to compromise the system.
CWE-77: Improper Neutralization of Special Elements used in a Command (βCommand Injectionβ) - CVE-2012-4945
Unauthenticated Site Actions: The application has several pages that could be exploited to allow an unauthenticated user to perform actions in the application that only an authenticated user should be able to perform.
CWE-326: Inadequate Encryption Strength - CVE-2012-4946
Reversible Encrypted Password Vulnerability: The user passwords for the application are stored in a reversible XOR encrypted format. If a malicious user is able to obtain the encrypted passwords, they would be able to be decrypted. A password key and the encryption/decryption function is located in afile.
CWE-312: Cleartext Storage of Sensitive Information - CVE-2012-4947
Information Disclosure Vulnerabilities: The application has several pages that can be exploited by malicious users to disclose potentially sensitive information. Database connection information including clear text credentials are stored in a file.
A remote unauthenticated attacker may obtain sensitive information, cause a denial of service condition or execute arbitrary code with the privileges of the application.
Update
The vendor has stated that these vulnerabilities have been addressed in version 4.08, version 4.08.01 and version 4.09.00. The vendor recommends that users update to version 4.09.00 or higher.
Restrict access
As a general good security practice, only allow connections from trusted hosts and networks. Note that restricting access does not prevent XSS or CSRF attacks since the attack comes as an HTTP request from a legitimate userβs host. Restricting access would prevent an attacker from accessing a web interface using stolen credentials from a blocked network location.
427547
Filter by status: All Affected Not Affected Unknown
Filter by content: __ Additional information available
__ Sort by: Status Alphabetical
Expand all
Javascript is disabled. Click here to view vendors.
Notified: March 14, 2012 Updated: October 30, 2012
Affected
We have not received a statement from the vendor.
The vendor has stated that these vulnerabilities have been addressed in version 4.08, version 4.08.01 and version 4.09.00. The vendor recommends that user update to version 4.08, version 4.08.01 and version 4.09.00 or higher.
Group | Score | Vector |
---|---|---|
Base | 10 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Temporal | 7 | E:POC/RL:OF/RC:UC |
Environmental | 1.8 | CDP:L/TD:L/CR:ND/IR:ND/AR:ND |
Thanks to Travis Lee for reporting this vulnerability.
This document was written by Michael Orlando.
CVE IDs: | CVE-2012-4941, CVE-2012-4942, CVE-2012-4943, CVE-2012-4944, CVE-2012-4945, CVE-2012-4946, CVE-2012-4947 |
---|---|
Date Public: | 2012-11-07 Date First Published: |