CVE-2017-2182
HighSummary
The Hands-on Vulnerability Learning Tool 'AppGoat' version 3.0.2 and earlier allows remote attackers to obtain local files via unspecified vectors, which is a different vulnerability than CVE-2017-2179 and CVE-2017-2181.
Risk Assessment
Attackers may gain access to sensitive local data, potentially leading to further attacks on the organization's systems.
Recommendation
It is recommended to update the 'AppGoat' tool to the latest version to minimize the risk associated with this vulnerability.
Other vulnerabilities in AppGoat
See all- CVE-2017-2181High
The Hands-on Vulnerability Learning Tool 'AppGoat' version 3.0.2 and earlier allows remote attackers to access local files via unspecified vectors. This is a different vulnerability than CVE-2017-2179 and CVE-2017-2182.
- CVE-2017-2179High
The Hands-on Vulnerability Learning Tool 'AppGoat' version 3.0.2 and earlier allows remote code execution via unspecified vectors, posing a serious security threat to web applications.
- CVE-2017-2101High
The Hands-on Vulnerability Learning Tool 'AppGoat' version 3.0.0 and earlier allows remote attackers to bypass authentication and perform arbitrary operations via unspecified vectors.
Original NVD description (English source)
Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspecified vectors, a different vulnerability than CVE-2017-2179 and CVE-2017-2181.