CVE-2009-4367

MEDIO 6.8CVE-2009-4367 · Published 21/12/2009 · updated 16/06/2026

In breve

CVE-2009-4367 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda staging module (sitecore).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 6.1%, superiore al 93.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
staging module sitecore	`≤ 5.4.0`	No fix yet

Description

The Staging Webservice ("sitecore modules/staging/service/api.asmx") in Sitecore Staging Module 5.4.0 rev.080625 and earlier allows remote attackers to bypass authentication and (1) upload files, (2) download files, (3) list directories, and (4) clear the server cache via crafted SOAP requests with arbitrary Username and Password values, possibly related to a direct request.

References

osvdb.org/61147
secunia.com/advisories/37763 · Vendor Advisory
exploit-db.com/exploits/10513 · Exploit
securityfocus.com/archive/1/508529/100/0/threaded
securityfocus.com/bid/37388 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/54881
sec-consult.com/files/20091217-0_sitecore_StagingModule_1.0.txt · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free