mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-08-04 08:44:25 +00:00
61 lines
2.1 KiB
JSON
61 lines
2.1 KiB
JSON
|
{
|
||
|
|
"CVE_data_meta": {
|
||
|
|
"ASSIGNER": "productcert@siemens.com",
|
||
|
|
"ID": "CVE-2019-18288",
|
||
|
|
"STATE": "PUBLIC"
|
||
|
|
},
|
||
|
|
"data_format": "MITRE",
|
||
|
|
"data_version": "4.0",
|
||
|
|
"data_type": "CVE",
|
||
|
|
"affects": {
|
||
|
|
"vendor": {
|
||
|
|
"vendor_data": [
|
||
|
|
{
|
||
|
|
"vendor_name": "Siemens AG",
|
||
|
|
"product": {
|
||
|
|
"product_data": [
|
||
|
|
{
|
||
|
|
"product_name": "SPPA-T3000 Application Server",
|
||
|
|
"version": {
|
||
|
|
"version_data": [
|
||
|
|
{
|
||
|
|
"version_value": "All versions"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"problemtype": {
|
||
|
|
"problemtype_data": [
|
||
|
|
{
|
||
|
|
"description": [
|
||
|
|
{
|
||
|
|
"lang": "eng",
|
||
|
|
"value": "CWE-434: Unrestricted Upload of File with Dangerous Type"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"description": {
|
||
|
|
"description_data": [
|
||
|
|
{
|
||
|
|
"lang": "eng",
|
||
|
|
"value": "A vulnerability has been identified in SPPA-T3000 Application Server (All versions). An attacker with valid authentication at the RMI interface could be able to\ngain remote code execution through an unsecured file upload.\n\nPlease note that an attacker needs to have access to the Application Highway\nin order to exploit this vulnerability.\n\nAt the time of advisory publication no public exploitation of this security\nvulnerability was known. \n"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"references": {
|
||
|
|
"reference_data": [
|
||
|
|
{
|
||
|
|
"refsource": "CONFIRM",
|
||
|
|
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
}
|