RSS   Vulnerabilities for 'Jetro cockpit secure browsing'   RSS

2014-02-18
 
CVE-2014-1861

CWE-20
 

 
The client in Jetro COCKPIT Secure Browsing (JCSB) 4.3.1 and 4.3.3 does not validate the FileName element in an RDP_FILE_TRANSFER document, which allows remote JCSB servers to execute arbitrary programs by providing a .EXE extension.

 


Copyright 2024, cxsecurity.com

 

Back to Top