CVE-2012-2670
7.3 High
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
77.7%
manageuser.php in Collabtive before 0.7.6 allows remote authenticated users, and possibly unauthenticated attackers, to bypass intended access restrictions and upload and execute arbitrary files by uploading an avatar file with an accepted Content-Type such as image/jpeg, then accessing it via a direct request to the file in files/standard/avatar.
References
archives.neohapsis.com/archives/bugtraq/2012-06/0007.html
www.collabtive.o-dyn.de/blog/?p=426
www.openwall.com/lists/oss-security/2012/06/06/6
www.openwall.com/lists/oss-security/2012/06/06/9
www.securityfocus.com/archive/1/522973/30/0/threaded
www.securityfocus.com/bid/53813
xync.org/2012/06/04/Arbitrary-File-Upload-in-Collabtive.html
exchange.xforce.ibmcloud.com/vulnerabilities/76101
Related
7.3 High
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
77.7%