Test ID:	1.3.6.1.4.1.25623.1.0.14241
Category:	Remote file access
Title:	4D WebStar Symbolic Link Vulnerability
Summary:	4D WebStar is reportedly vulnerable to a local symbolic link vulnerability.
Description:	Summary: 4D WebStar is reportedly vulnerable to a local symbolic link vulnerability. Vulnerability Insight: This issue is due to a design error that causes the application to open files without properly verifying their existence or their absolute location. Vulnerability Impact: Successful exploitation of this issue will allow an attacker to write to arbitrary files writable by the affected application, facilitating privilege escalation. Solution: Upgrade to 4D WebStar 5.3.3 or later. CVSS Score: 3.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Cross-Ref:	BugTraq ID: 10714 Common Vulnerability Exposure (CVE) ID: CVE-2004-0698 @stake Security Advisory: A071304-1 http://www.atstake.com/research/advisories/2004/a071304-1.txt ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt XForce ISS Database: 4dwebstar-symlink(16689) https://exchange.xforce.ibmcloud.com/vulnerabilities/16689
Copyright	Copyright (C) 2004 David Maciejak

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.