Path Traversal Vulnerabilities in WatchFire AppScan by IBM
CVE-2008-2015
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2008-2015?
WatchFire AppScan 7.0 contains multiple absolute path traversal vulnerabilities due to flaws in certain ActiveX controls. These vulnerabilities allow remote attackers to manipulate files by providing full pathnames to the arguments of the CompactSave and SaveSession methods, as well as the saveRecordedExploreToFile method in different controls. Exploitation can lead to arbitrary file creation or overwriting, potentially enabling malicious users to execute code through files written into directories such as the Startup folder.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.