CVE-2017-6526

Critical

Published: 09/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered in dnaTools dnaLIMS 4-2015s13 related to unauthenticated command execution through an improperly protected administrative web shell (cgi-bin/dna/sysAdmin.cgi in POST requests).

Risk Assessment

The organization may be exposed to unauthorized access to the system, potentially leading to serious security breaches.

Recommendation

It is recommended to secure the administrative interface and implement appropriate authorization mechanisms for all requests to cgi-bin/dna/sysAdmin.cgi.

Original NVD description (English source)

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to unauthenticated command execution through an improperly protected administrative web shell (cgi-bin/dna/sysAdmin.cgi POST requests).