The XSLTCompiledTransform function in Ektron Content Management System (CMS) before 8.02 SP5 configures the XSL with enableDocumentFunction set to true, which allows remote attackers to read arbitrary files and consequently bypass authentication, modify viewstate, cause a denial of service, or possibly have unspecified other impact via crafted XSL data.
References
| Link | Resource |
|---|---|
| http://documentation.ektron.com/current/ReleaseNotes/Release8/8.02SP5.htm | Issue Tracking Vendor Advisory |
| https://technet.microsoft.com/library/security/msvr12-016 | Issue Tracking Release Notes Third Party Advisory |
| https://webstersprodigy.net/2012/10/25/cve-2012-5357cve-1012-5358-cool-ektron-xslt-rce-bugs/ | Exploit Issue Tracking Third Party Advisory |
| http://documentation.ektron.com/current/ReleaseNotes/Release8/8.02SP5.htm | Issue Tracking Vendor Advisory |
| https://technet.microsoft.com/library/security/msvr12-016 | Issue Tracking Release Notes Third Party Advisory |
| https://webstersprodigy.net/2012/10/25/cve-2012-5357cve-1012-5358-cool-ektron-xslt-rce-bugs/ | Exploit Issue Tracking Third Party Advisory |
Configurations
History
21 Nov 2024, 01:44
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://documentation.ektron.com/current/ReleaseNotes/Release8/8.02SP5.htm - Issue Tracking, Vendor Advisory | |
| References | () https://technet.microsoft.com/library/security/msvr12-016 - Issue Tracking, Release Notes, Third Party Advisory | |
| References | () https://webstersprodigy.net/2012/10/25/cve-2012-5357cve-1012-5358-cool-ektron-xslt-rce-bugs/ - Exploit, Issue Tracking, Third Party Advisory |
Information
Published : 2017-10-30 14:29
Updated : 2024-11-21 01:44
NVD link : CVE-2012-5358
Mitre link : CVE-2012-5358
CVE.ORG link : CVE-2012-5358
JSON object : View
Products Affected
ektron
- ektron_content_management_system
CWE
CWE-19
Data Processing Errors