Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
146377 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.103528
Categoría:Web application abuses
Título:Plixer / Dell SonicWALL Scrutinizer < 9.5.0 Multiple Vulnerabilities - Active Check
Resumen:Plixer / Dell SonicWALL Scrutinizer is prone to multiple; vulnerabilities.
Descripción:Summary:
Plixer / Dell SonicWALL Scrutinizer is prone to multiple
vulnerabilities.

Vulnerability Insight:
The following flaws exist:

- CVE-2012-2626: A security bypass vulnerability.

Successful attacks can allow an attacker to gain access to the affected application using the
default authentication credentials.

- CVE-2012-2627: A vulnerability that lets attackers upload arbitrary files. The issue occurs
because the application fails to adequately sanitize user-supplied input.

An attacker may leverage this issue to upload arbitrary files to the affected computer, this can
result in arbitrary code execution within the context of the vulnerable application.

- CVE-2012-3848: Multiple cross-site scripting (XSS) vulnerabilities.

Affected Software/OS:
Plixer / Dell SonicWALL Scrutinizer versions prior to 9.5.0.

Solution:
Update to version 9.5.0 or later.

CVSS Score:
9.4

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:C/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2012-2626
http://www.plixer.com/Press-Releases/plixer-releases-9-5-2.html
https://www.trustwave.com/spiderlabs/advisories/TWSL2012-014.txt
Common Vulnerability Exposure (CVE) ID: CVE-2012-2627
Common Vulnerability Exposure (CVE) ID: CVE-2012-3848
CopyrightCopyright (C) 2012 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.