CVE-2005-0685

HOCH 7.5CVE-2005-0685 · Published 08/03/2005 · updated 16/06/2026

Kurz gesagt

CVE-2005-0685 ist eine Schwachstelle (HOCH (CVSS 7.5)) in participate enterprise (outstart).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.5%, höher als bei 75.2% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
participate enterprise outstart	`= 3`	No fix yet

Description

Multiple access validation errors in OutStart Participate Enterprise (PE) allow remote attackers to (1) browse arbitrary directory trees by modifying the rootFolder parameter to displaynavigator.jsp, (2) rename arbitrary directory objects by modifying the selectedObject parameter to renamepopup.jsp, (3) delete arbitrary directory objects by modifying the selectedObjectsCSV parameter to displaydeletenavigator.jsp, and conduct other unauthorized activities via the (4) showDeleteView, (5) showWebFolderView, (6) showLibraryView, (7) showMyLibraryView, (8) singleSelectObject, (9) processRadioSelection, (10) processCheckboxSelection, (11) singleSelectObject, (12) addToSelectedObjects, or (13) removeFromSelectedObjects commands.

References

secunia.com/advisories/14542 · Patch
security.honour.ca/outstartpsi.txt · Patch
securityfocus.com/archive/1/392623 · Vendor Advisory
securityfocus.com/bid/12752 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/19632

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free