CVE-2019-10265

2019-07-26 23:15:11 2019-07-31 15:05:29

An issue was discovered in Ahsay Cloud Backup Suite before 8.1.1.50. On the /cbs/system/ShowAdvanced.do "File Explorer" screen, it is possible to change the directory in the JavaScript code. If changed to (for example) "C:" then one can browse the whole server.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

COMPLETE

Integrity

NONE

Availability

NONE

Ahsay Cloud backup suite 7.3.0.0 (not an official CPE) Ahsay Cloud backup suite 7.3.2.0 (not an official CPE) Ahsay Cloud backup suite 7.5.0.0 (not an official CPE) Ahsay Cloud backup suite 7.7.0.0 (not an official CPE) Ahsay Cloud backup suite 7.7.2.0 (not an official CPE) Ahsay Cloud backup suite 7.9.0.0 (not an official CPE) Ahsay Cloud backup suite 7.9.2.0 (not an official CPE) Ahsay Cloud backup suite 7.9.2.2 (not an official CPE) Ahsay Cloud backup suite 7.11.0.4 (not an official CPE) Ahsay Cloud backup suite 7.11.0.10 (not an official CPE) Ahsay Cloud backup suite 7.11.0.20 (not an official CPE) Ahsay Cloud backup suite 7.13.0.0 (not an official CPE) Ahsay Cloud backup suite 7.13.0.2 (not an official CPE) Ahsay Cloud backup suite 7.13.0.6 (not an official CPE) Ahsay Cloud backup suite 7.15.0.8 (not an official CPE) Ahsay Cloud backup suite 7.15.0.20 (not an official CPE) Ahsay Cloud backup suite 7.15.2.2 (not an official CPE) Ahsay Cloud backup suite 7.15.4.10 (not an official CPE) Ahsay Cloud backup suite 7.15.4.41 (not an official CPE) Ahsay Cloud backup suite 7.15.6.38 (not an official CPE) Ahsay Cloud backup suite 7.15.6.55 (not an official CPE) Ahsay Cloud backup suite 7.17.0.30 (not an official CPE) Ahsay Cloud backup suite 7.17.0.50 (not an official CPE) Ahsay Cloud backup suite 8.1.0.24 (not an official CPE) Ahsay Cloud backup suite 8.1.0.50 (not an official CPE)

Ahsay - Cloud backup suite

Advisory	Patch	Confirmed	Link
			https://www.wbsec.nl/ahsay/

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (ID 22)

Related CAPEC 7 Relative Path Traversal (CAPEC-ID 139) Directory Traversal (CAPEC-ID 213) File System Function Injection, Content Based (CAPEC-ID 23) Using Slashes and URL Encoding Combined to Bypass Validation Logic (CAPEC-ID 64) Manipulating Input to File System Calls (CAPEC-ID 76) Using Escaped Slashes in Alternate Encoding (CAPEC-ID 78) Using Slashes in Alternate Encoding (CAPEC-ID 79)