CVE-2017-9640
25.08.2017, 19:29
A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5.2 and prior. An authenticated attacker may be able to overwrite files that are used to execute code. This vulnerability does not affect version 6.5 of the software.
| Vendor | Product | Version |
|---|---|---|
| automatedlogic | i-vu | 𝑥 ≤ 5.2 |
| automatedlogic | i-vu | 𝑥 ≤ 5.5 |
| automatedlogic | i-vu | 𝑥 ≤ 6.0 |
| automatedlogic | sitescan_web | 𝑥 ≤ 5.2 |
| automatedlogic | sitescan_web | 𝑥 ≤ 5.5 |
| automatedlogic | sitescan_web | 𝑥 ≤ 6.1 |
| carrier | automatedlogic_webctrl | 𝑥 ≤ 5.2 |
| carrier | automatedlogic_webctrl | 𝑥 ≤ 5.5 |
| carrier | automatedlogic_webctrl | 𝑥 ≤ 6.0 |
| carrier | automatedlogic_webctrl | 𝑥 ≤ 6.1 |
𝑥
= Vulnerable software versions