Signature Detail
Short Name |
HTTP:DIR:CA-ERWIN-WEB-PORTAL |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
CA ERwin Web Portal Directory Traversal |
Release Date |
2014/05/08 |
Update Number |
2372 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: CA ERwin Web Portal Directory Traversal
This signature detects attempts to exploit a known vulnerability in CA ERwin Web Portal. This vulnerability is due to lack of authentication and insufficient input validation when processing HTTP requests. By sending crafted HTTP requests to the target system, a remote unauthenticated attacker can leverage this vulnerability to delete arbitrary files recursively on a target system.
References
- BugTraq: 66644
- CVE: CVE-2014-2210