CVE-2012-5358 The XSLTCompiledTransform function in Ektron Content Management System (CMS) before 8.02 SP5 configures the XSL with enableDocumentFunction set to true, which allows remote attackers to read arbitrary...
CriticalCVSS 9.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The XSLTCompiledTransform function in Ektron Content Management System (CMS) before 8.02 SP5 configures the XSL with enableDocumentFunction set to true, which allows remote attackers to read arbitrary files and consequently bypass authentication, modify viewstate, cause a denial of service, or possibly have unspecified other impact via crafted XSL data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ektron content management system | <= 8.02 | No fix listed |
References
- documentation.ektron.com issue-tracking vendor-advisory
- technet.microsoft.com issue-tracking release-notes third-party-advisory
- webstersprodigy.net exploit issue-tracking third-party-advisory