{"id":6650,"date":"2017-02-15T14:19:06","date_gmt":"2017-02-15T22:19:06","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/02\/15\/news-469\/"},"modified":"2017-02-15T14:19:06","modified_gmt":"2017-02-15T22:19:06","slug":"news-469","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2017\/02\/15\/news-469\/","title":{"rendered":"SSD Advisory \u2013 Tripwire IP360 Local File Inclusion"},"content":{"rendered":"

Credit to Author: Maor Schwartz| Date: Wed, 15 Feb 2017 07:16:18 +0000<\/strong><\/p>\n

\n

Vulnerabilities Summary<\/strong>
The following advisory describes a Local File Inclusion (LFI) vulnerability found in Tripwire IP360 version 7.2.6. Tripwire IP360 is a enterprise-class vulnerability and risk assessment, it’s provides visibility into the enterprise network, including all networked devices and their associated operating systems and application.<\/p>\n

Credit<\/strong>
An independent security researcher Mohammed Shameem has reported this vulnerability to Beyond Security\u2019s SecuriTeam Secure Disclosure program<\/p>\n

Vendor response<\/strong>
Tripwire has stated 7.2.6 which was vulnerable has reached end of life. No other version of Tripwire is affected by this LFI vulnerability. Tripwire customers still using version 7.2.6 should upgrade to version 7.5 or newer which is supported.<\/p>\n

<\/span><\/p>\n

Vulnerabilities Details<\/strong>
Tripwire IP360 version 7.2.6 suffers from Local File Inclusion vulnerability.<\/p>\n

While browsing the “Help<\/em>” section of the product, it’s pops up the following window:<\/p>\n

\"\"<\/a><\/p>\n

The highlighted section in the image is fetched with URL:<\/p>\n<\/p>\n

\t\t<\/p>\n

\n
<\/span> \t\t\t<\/p>\n
\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n
\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n
<\/div>\n