EUVD-2017-4352

Malware in sbrugna...

Path traversal

Analysis of the Bomgar Remote Support Portal JavaStart.jar Applet 52790 and earlier revealed that it is vulnerable to a path traversal vulnerability. The archive can be downloaded from a given Bomgar Remote Support Portal deployment at https://domain/api/content/JavaStart.jar and is callable from...

CVE-2017-12815

Analysis of the Bomgar Remote Support Portal JavaStart.jar Applet 52790 and earlier revealed that it is vulnerable to a path traversal vulnerability. The archive can be downloaded from a given Bomgar Remote Support Portal deployment at https://domain/api/content/JavaStart.jar and is callable from...

CVE-2017-12815

CVE-2017-12815 concerns a path traversal vulnerability in Bomgar Remote Support Portal’s JavaStart.jar Applet (versions 52790 and earlier). The underlying issue is in App.class, which uses the attacker-controlled URL parameter to construct a File() path, allowing creation/modification/deletion of...

CVE-2017-12815: Improper Limitation of a Pathname to a Restricted Directory

Analysis of the Bomgar Remote Support Portal JavaStart.jar Applet 52790 and earlier revealed that it is vulnerable to a path traversal vulnerability. The archive can be downloaded from a given Bomgar Remote Support Portal deployment at https://domain/api/content/JavaStart.jar and is callable from...

PT-2017-3637

Name of the Vulnerable Software and Affected Versions: Bomgar Remote Support Portal versions 52790 and earlier Description: The issue exists due to insufficient restriction of the directory path name with limited access in the JavaStart.jar component of the Bomgar Remote Support Portal. This allo...

Unspecified PHP Code Execution Vulnerability in Bomgar Remote Support Portal Application

Bomgar Remote Support is a secure remote desktop solution. The Bomgar Remote Support Portal application fails to properly filter input, allowing remote attackers to submit special requests to execute arbitrary PHP code...