CVE-2016-10367

2017-05-03 12:59:00 2017-05-17 18:38:36

In Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch), an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request utilizing a simple URL encoding bypass, %252f instead of /.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE

Opsview Opsview 4.5.0 ~~pro~~~ (not an official CPE) Opsview Opsview 5.0.2 ~~pro~~~ (not an official CPE) Opsview Opsview 4.6.4 ~~pro~~~ (not an official CPE) Opsview Opsview 5.1.0 ~~pro~~~ (not an official CPE)

Opsview - Opsview

Advisory	Patch	Confirmed	Link
			https://www.trustwave.com/Resources/Security-Advisories/...

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (ID 22)

Related CAPEC 7 Relative Path Traversal (CAPEC-ID 139) Directory Traversal (CAPEC-ID 213) File System Function Injection, Content Based (CAPEC-ID 23) Using Slashes and URL Encoding Combined to Bypass Validation Logic (CAPEC-ID 64) Manipulating Input to File System Calls (CAPEC-ID 76) Using Escaped Slashes in Alternate Encoding (CAPEC-ID 78) Using Slashes in Alternate Encoding (CAPEC-ID 79)