Summary
Scrutinizer is prone to multiple vulnerabillities.
1. A vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input.
An attacker may leverage this issue to upload arbitrary files to the affected computer
this can result in arbitrary code execution within the context of the vulnerable application.
2. A security-bypass vulnerability.
Successful attacks can allow an attacker to gain access to the affected application using the default authentication credentials.
Scrutinizer 9.5.0 is vulnerable
other versions may also be affected.
Solution
Updates are available. Please see the references for more information.
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2012-2626, CVE-2012-2627 -
CVSS Base Score: 9.4
AV:N/AC:L/Au:N/C:N/I:C/A:C
Related Vulnerabilities