BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors.
References
Link | Resource |
---|---|
http://www.kb.cert.org/vuls/id/990652 | US Government Resource |
Configurations
Information
Published : 2013-02-24 03:48
Updated : 2013-02-25 21:00
NVD link : CVE-2012-6274
Mitre link : CVE-2012-6274
JSON object : View
CWE
CWE-287
Improper Authentication
Products Affected
bigantsoft
- bigant_im_message_server