Lucene search
Veracode Vulnerability DatabaseVERACODE:28188HistoryDec 06, 2020 - 3:25 a.m.
Authentication Bypass
2020-12-0603:25:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.054 Low
EPSS
Percentile
93.2%
php-horde-gollem is vulnerable to authentication bypass. The File Manager (gollem) module allows remote attackers to bypass Horde authentication for file downloads via a malicious fn parameter that corresponds to the exact filename.
| CPE | Name | Operator | Version |
|---|---|---|---|
| php-horde-gollem:stretch | eq | 3.0.10-1+deb9u1 | |
| php-horde-gollem:stretch | eq | 3.0.10-1+deb9u1 |
Related
osv
osv
CVE-2017-15235
2017-10-11 03:29:00
php-horde-gollem - security update
2020-08-29 00:00:00
debiancve
debiancve
CVE-2017-15235
2017-10-11 03:29:00
ubuntucve
ubuntucve
CVE-2017-15235
2017-10-11 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2352-1)
2020-08-30 00:00:00
Horde Gollem Module Unauthorized File Download Vulnerability - Linux
2017-12-06 00:00:00
Horde Gollem Module Unauthorized File Download Vulnerability - Windows
2017-12-06 00:00:00
debian
debian
[SECURITY] [DLA 2352-1] php-horde-gollem security update
2020-08-29 20:05:13
nessus
nessus
Debian DLA-2352-1 : php-horde-gollem security update
2020-08-31 00:00:00
cve
cve
CVE-2017-15235
2017-10-11 03:29:00
exploitpack
exploitpack
Horde Groupware 5.2.21 - Unauthorized File Download
2017-08-03 00:00:00
prion
prion
Authentication flaw
2017-10-11 03:29:00
nvd
nvd
CVE-2017-15235
2017-10-11 03:29:00
cvelist
cvelist
CVE-2017-15235
2017-10-11 03:00:00
exploitdb
exploitdb
Horde Groupware 5.2.21 - Unauthorized File Download
2017-08-03 00:00:00