Security feature bypass

2017-05-0518:29:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.0%

JSON

An issue was discovered on Accellion FTA devices before FTA_9_12_180. The home/seos/courier/ldaptest.html POST parameter “filter” can be used for LDAP Injection.

CPENameOperatorVersion
file_transfer_applianceeq<= 91240

CPE	Name	Operator	Version
	file_transfer_appliance	eq	<= 91240

References

gist.github.com/anonymous/32e2894fa29176f3f32cb2b2bb7c24cb