Vulners
Lucene search
Performance Guard Arbitrary File Read / Traversal Vulnerabilities
| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | CVE-2013-5216 | 12 Sep 201318:00 | – | cve |
 | CVE-2013-5216 | 12 Sep 201318:00 | – | cvelist |
 | EUVD-2013-5056 | 7 Oct 202500:30 | – | euvd |
 | CVE-2013-5216 | 12 Sep 201318:37 | – | nvd |
 | Performance Guard Arbitrary File Read / Traversal | 29 Aug 201300:00 | – | packetstorm |
 | Directory traversal | 12 Sep 201318:37 | – | prion |
 | CVE-2013-5216 | 22 May 202506:11 | – | redhatcve |
 | CVE-2013-5216 CapaSystems Performance Guard Path Traversal Vulnerability | 9 Sep 201300:00 | – | securityvulns |
| Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | 9 Sep 201300:00 | – | securityvulns |
Application Performance Guard
Vendor CapaSystems
Link http://www.capasystems.com/it-performance-monitorin
Discovered by Kerem Kocaer <kerem.kocaer(at)gmail(dot)com>
Problem
-------
Path traversal vulnerability in the "download logs" section allows remote attackers to read
arbitrary files by intercepting and modifying the file path in an HTTP request to "uploadreader.jsp".
The vulnerability is confirmed to exist in version 6.1.27. Other versions may also be vulnerable.
Exploit
-------
This issue can be exploited with a web browser and a proxy tool to intercept and modify parameters
sent to: http://[address]/logreader/uploadreader.jsp
Fix
---
The vendor has reported fixing the problem in version 6.2.102.
Bug Fix PG-8050 (http://capawiki.capasystems.com/display/pgdoc/PG+6.2.102)
Timeline
--------
2013-05-16 Provided details to CapaSystems
2013-06-07 Performance Guard version 6.2.102 released (with Bug fix PG-8050)
# 0day.today [2018-03-19] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
30 Aug 2013 00:00Current
6.6Medium risk
Vulners AI Score6.6
EPSS0.00529