CVE-2017-8793
HighSummary
An issue was discovered on Accellion FTA devices before FTA_9_12_180. By sending a POST request to home/seos/courier/web/wmProgressstat.html.php with an attacker domain in the acallow parameter, the device will respond with an Access-Control-Allow-Origin header allowing the attacker to bypass the Same Origin Policy.
Risk Assessment
The organization may be exposed to cross-site attacks, potentially leading to unauthorized access to user data and resources. This poses a serious threat to the integrity and confidentiality of information.
Recommendation
It is recommended to update Accellion FTA devices to version FTA_9_12_180 or later to mitigate this vulnerability. Additionally, conducting a security audit to identify potential security gaps is advisable.
Other vulnerabilities in Accellion FTA devices
See all- CVE-2017-8794Critical
An issue was discovered on Accellion FTA devices before FTA_9_12_180 related to a regular expression that lacks an initial ^ character. This allows SSRF attacks with the file:///etc/passwd#https:// URL pattern.
- CVE-2017-8790Critical
An issue was discovered on Accellion FTA devices before FTA_9_12_180 related to LDAP Injection. The POST parameter 'filter' in ldaptest.html can be exploited.
- CVE-2017-8303Critical
An issue was discovered on Accellion FTA devices before FTA_9_12_180 that allows Remote Code Execution using shell metacharacters in the method parameter seos/1000/find.api.
Original NVD description (English source)
An issue was discovered on Accellion FTA devices before FTA_9_12_180. By sending a POST request to home/seos/courier/web/wmProgressstat.html.php with an attacker domain in the acallow parameter, the device will respond with an Access-Control-Allow-Origin header allowing the attacker to have site access with a bypass of the Same Origin Policy.