Join our followers
Arbitrary File Disclosure and Open Redirect in Bonita BPM
| Advisory ID: | HTB23259 |
| Product: | Bonita BPM |
| Vendor: | Bonitasoft |
| Vulnerable Versions: | 6.5.1 and probably prior |
| Tested Version: | 6.5.1 (Windows and Mac OS packages) |
| Advisory Publication: | May 7, 2015 [without technical details] |
| Vendor Notification: | May 7, 2015 |
| Vendor Fix: | June 9, 2015 |
| Public Disclosure: | June 10, 2015 |
| Latest Update: | June 9, 2015 |
| Vulnerability Type: | Path Traversal [CWE-22] Open Redirect [CWE-601] |
| CVE References: | CVE-2015-3897 CVE-2015-3898 |
| Risk Level: | High |
 | |
| CVSSv2 Base Scores: | 7.8 (AV:N/AC:L/Au:N/C:C/I:N/A:N) 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N) |
| Solution Status: | Fixed by Vendor |
| Discovered and Provided: | High-Tech Bridge Security Research Lab |
| Advisory Details: | |
High-Tech Bridge Security Research Lab two vulnerabilities in Bonita BPM Portal (Bonita's web interface running by default on port 8080), which can be exploited by remote non-authenticated attacker to compromise the vulnerable web application and the web server on which it is hosted. | |
| Solution: | |
| Update to Bonita BPM 6.5.3 More Information: http://community.bonitasoft.com/blog/bonita-bpm-653-available | |
References: | |
| [1] High-Tech Bridge Advisory HTB23259 - https://www.immuniweb.com/advisory/HTB23259 - Arbitrary File Disclosure and Open Redirect in Bonita BPM. [2] Bonita BPM - http://www.bonitasoft.com/ - Bonita BPM for business process applications - the BPM platform that gives developers freedom to create and manage highly customizable business apps. [3] Common Vulnerabilities and Exposures (CVE) - http://cve.mitre.org/ - international in scope and free for public use, CVE® is a dictionary of publicly known information security vulnerabilities and exposures. [4] Common Weakness Enumeration (CWE) - http://cwe.mitre.org - targeted to developers and security practitioners, CWE is a formal list of software weakness types. [5] ImmuniWeb® - Leveraging the power of machine-learning and genius of human brain to deliver the most advanced web application security and penetration testing. [6] ImmuniWeb® SSLScan - Test your servers for security and compliance with PCI DSS, HIPAA and NIST. | |
Please feel free to send us any additional information related to this Advisory, such as vulnerable versions, additional exploitation details and conditions, patches and other relevant details.
