CVE-2019-19458

概要

参考情報

• packetstormsecurity.com/files/155525/SALTO-ProAccess-SPACE-5.5-Traversal-File-Write-XSS-Bypass.html · Exploit
• sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-salto-proaccess-space · Exploit

proaccess space のその他の脆弱性

• CVE-2019-19459緊急 9.8An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. An attacker can write arbitrary content to arbitrary files, as demonstrated by CVE…
• CVE-2019-19457中 5.4SALTO ProAccess SPACE 5.4.3.0 allows XSS.
• CVE-2019-19460中 5.5An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. The product's webserver runs as a Windows service with local SYSTEM permissions by…