Unrestricted file upload

2013-09-2410:35:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.8%

JSON

The mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated users to upload .exe files by leveraging (1) publisher or (2) administrator privileges.

CPENameOperatorVersion
arcgiseq10.1
arcgiseq10.2

CPE	Name	Operator	Version
	arcgis	eq	10.1
	arcgis	eq	10.2

References

support.esri.com/en/downloads/patches-servicepacks/view/productid/66/metaid/2009

support.esri.com/en/knowledgebase/techarticles/detail/41497