Lucene search

Japan Vulnerability NotesJVN:08871006

HistoryMar 05, 2012 - 12:00 a.m.

JVN#08871006: ES File Explorer fails to restrict access permissions

2012-03-0500:00:00

Japan Vulnerability Notes

jvn.jp

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

69.8%

JSON

ES File Explorer provided by EStrongs Inc. is a file and application manager. ES File Explorer contains an issue where access permissions are not restricted.

Impact

When using a specific function, a remote attacker may obtain local files that the application has permissions to view.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

ES File Explorer versions 1.6.0.2 through 1.6.1.1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

69.8%

JSON

Related for JVN:08871006