ID de Prueba:	1.3.6.1.4.1.25623.1.0.105182
Categoría:	Web application abuses
Título:	Vaadin Framework Portlet Information Disclosure Vulnerability
Resumen:	This web application is running with the Vaadin Framework which; is prone to information-disclosure because the application fails to properly sanitize user-supplied input.
Descripción:	Summary: This web application is running with the Vaadin Framework which is prone to information-disclosure because the application fails to properly sanitize user-supplied input. Vulnerability Insight: This flaw exists due to an existing unused code from AbstractApplicationPortlet. Vulnerability Impact: A remote user who has access to a portlet on the portal could be able to read files in the portlet deployment directory using specially crafted resource requests provided the attacker knows the file name. Affected Software/OS: Vaadin Framework versions from 6.2.0 up to 6.8.9 / from 7.0.0 up to 7.0.3. Solution: Upgrade to Vaadin Framework version 6.8.10 or later / 7.0.4 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2015 SCHUTZWERK GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.