CVE-2015-7904

Unrestricted file upload vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary JSP code via vectors involving an upload of an image file.

CVSS v2.0 6.5 MEDIUM

6.5^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02	Patch Third Party Advisory US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02	Patch Third Party Advisory US Government Resource

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:infinite_automation_systems:mango_automation:2.5.0:::::::*
	cpe:2.3:a:infinite_automation_systems:mango_automation:2.5.5:::::::*
	cpe:2.3:a:infinite_automation_systems:mango_automation:2.6.0:::::::*

History

21 Nov 2024, 02:37

Type	Values Removed	Values Added
References	~~() https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02 - Patch, Third Party Advisory, US Government Resource~~	() https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02 - Patch, Third Party Advisory, US Government Resource

Information

Published : 2015-10-28 10:59

Updated : 2024-11-21 02:37

NVD link : CVE-2015-7904

Mitre link : CVE-2015-7904

CVE.ORG link : CVE-2015-7904

JSON object : View

Products Affected

infinite_automation_systems

mango_automation

CWE

NVD-CWE-Other

{"id": "CVE-2015-7904", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-10-28T10:59:24.767", "references": [{"url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "ics-cert@hq.dhs.gov"}, {"url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Unrestricted file upload vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary JSP code via vectors involving an upload of an image file."}, {"lang": "es", "value": "Vulnerabilidad de carga de archivos sin restricciones en Infinite Automation Mango Automation 2.5.x y 2.6.x en versiones anteriores a 2.6.0 build 430 permite a usuarios remotos autenticados ejecutar c\u00f3digo JSP arbitrario a trav\u00e9s de vectores que implican una carga de un archivo de imagen."}], "lastModified": "2024-11-21T02:37:38.603", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:infinite_automation_systems:mango_automation:2.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A063CF76-AB38-427E-9FB7-BF8CCC7FECF9"}, {"criteria": "cpe:2.3:a:infinite_automation_systems:mango_automation:2.5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "763D5AAE-CCFE-4BA8-B3CD-0110E8ECDFB8"}, {"criteria": "cpe:2.3:a:infinite_automation_systems:mango_automation:2.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6A87E664-6033-47BD-B182-A89245435417"}], "operator": "OR"}]}], "evaluatorComment": "<a href=\"http://cwe.mitre.org/data/definitions/434.html\">CWE-434: Unrestricted Upload of File with Dangerous Type</a>", "sourceIdentifier": "ics-cert@hq.dhs.gov"}