CVE-2012-2289 File upload in n/a
Remote attackers can upload files to arbitrary locations and potentially execute code in EMC ApplicationXtender Desktop and Web Access.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2012-2289?
CVE-2012-2289 is a high-severity vulnerability in n/a, published on 26 Aug 2012. It can be exploited over the network, with no action from the victim.
Official description
EMC ApplicationXtender Desktop before 6.5 SP2 and ApplicationXtender Web Access .NET before 6.5 SP2 allow remote attackers to upload files to any location, and possibly execute arbitrary code, via unspecified vectors.
Weakness: CWE-264
Which versions are affected by CVE-2012-2289?
It affects 2 products.
Products include Emc Applicationxtender Desktop, Emc Applicationxtender Web Access .Net.
How do I fix CVE-2012-2289?
No fix has been published for CVE-2012-2289 yet. Limit exposure of the affected software until one is available.
Is CVE-2012-2289 being exploited?
There is no known exploitation of CVE-2012-2289 in the wild and no public exploit code.
Sources
Also known as GHSA-gcv4-q636-39r7.