ManyDesigns Portofino 5.3.2 WarFileLauncher.java createTempDir 信息公开

在ManyDesigns Portofino 5.3.2 中已发现分类为棘手的漏洞。 受此漏洞影响的是功能createTempDir文件：WarFileLauncher.java。 手动调试的不合法输入可导致 信息公开。 漏洞的CWE定义是 CWE-379。 此漏洞的脆弱性 2022-11-11公示人身份94653cb357806c9cf24d8d294e6afea33f8f0775、所披露。 分享公告的网址是github.com。 该漏洞被称作为CVE-2022-3952， 攻击只能在局域网内完成。 有技术细节可用。 没有可利用漏洞。 当前漏洞利用价值为美元大约是 $0-$5k。 它被宣布为未定义。 我们估计的零日攻击价值约为$0-$5k。 升级到版本5.3.3能够解决此问题。 更新版本下载地址为 github.com。 补丁名称为94653cb357806c9cf24d8d294e6afea33f8f0775。 错误修复程序下载地址为github.com， 建议对受到影响的组件升级。 该漏洞被披露后，此前未曾发表过可能的缓解措施。

时间轴

用户

125

字段

exploit_price_0day2
source_cve_nvd_summary1
source_cve_assigned1
advisory_identifier1
vulnerability_cvss3_meta_tempscore1

Commit Conf

90%31
50%13
70%3

Approve Conf

90%31
80%13
70%3
ID已提交用户字段更改备注已接受地位C
133956762022-12-17VulD...price_0day$0-$5ksee exploit price documentation2022-12-17已接受
90
133956752022-12-17VulD...cve_nvd_summaryA vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipulation leads to creation of temporary file in directory with insecure permissions. Upgrading to version 5.3.3 is able to address this issue. The name of the patch is 94653cb357806c9cf24d8d294e6afea33f8f0775. It is recommended to upgrade the affected component. The identifier VDB-213457 was assigned to this vulnerability.cve.mitre.org2022-12-17已接受
70
133956742022-12-17VulD...cve_assigned1668121200 (2022-11-11)cve.mitre.org2022-12-17已接受
70
133956732022-12-17VulD...identifier94653cb357806c9cf24d8d294e6afea33f8f0775cve.mitre.org2022-12-17已接受
70
132542032022-11-11VulD...price_0day$0-$5ksee exploit price documentation2022-11-11已接受
90
132542022022-11-11VulD...cvss3_meta_tempscore2.5see CVSS documentation2022-11-11已接受
90
132542012022-11-11VulD...cvss3_meta_basescore2.6see CVSS documentation2022-11-11已接受
90
132542002022-11-11VulD...cvss3_vuldb_tempscore2.5see CVSS documentation2022-11-11已接受
90
132541992022-11-11VulD...cvss3_vuldb_basescore2.6see CVSS documentation2022-11-11已接受
90
132541982022-11-11VulD...cvss2_vuldb_tempscore1.2see CVSS documentation2022-11-11已接受
90
132541972022-11-11VulD...cvss2_vuldb_basescore1.4see CVSS documentation2022-11-11已接受
90
132541962022-11-11VulD...cvss3_vuldb_eXderived from historical data2022-11-11已接受
80
132541952022-11-11VulD...cvss3_vuldb_uiNderived from historical data2022-11-11已接受
80
132541942022-11-11VulD...cvss3_vuldb_prLderived from historical data2022-11-11已接受
80
132541932022-11-11VulD...cvss3_vuldb_avAderived from historical data2022-11-11已接受
80
132541922022-11-11VulD...cvss2_vuldb_eNDderived from historical data2022-11-11已接受
80
132541912022-11-11VulD...cvss2_vuldb_auSderived from historical data2022-11-11已接受
80
132541902022-11-11VulD...cvss2_vuldb_avAderived from historical data2022-11-11已接受
80
132541892022-11-11VulD...cvss2_vuldb_rlOFderived from vuldb v3 vector2022-11-11已接受
80
132541882022-11-11VulD...cvss2_vuldb_rcCderived from vuldb v3 vector2022-11-11已接受
80

27 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 27 results.

◂ 上一步一览下一步 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!