CVE-2012-6274 BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors.
MediumCVSS 5.0
EPSS 46.9%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bigantsoft bigant im message server | All versions | No fix listed |
References
- VU#990652 third-party-advisory us-government-resource