Test Kennung:	1.3.6.1.4.1.25623.1.0.812234
Kategorie:	Web application abuses
Titel:	Horde Gollem Module Unauthorized File Download Vulnerability (Windows)
Zusammenfassung:	Horde Groupware is prone to an unauthorized file download vulnerability.
Beschreibung:	Summary: Horde Groupware is prone to an unauthorized file download vulnerability. Vulnerability Insight: The flaw is due to user controlled input is not sufficiently sanitized when passed to File Manager (gollem) module. Vulnerability Impact: Successful exploitation will allow remote attackers to bypass Horde authentication for file downloads via a crafted 'fn' parameter that corresponds to the exact filename. Affected Software/OS: The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 on Windows. Solution: Upgrade to latest version of Horde Groupware and File Manager (gollem) module. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-15235
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.