[et_pb_section fb_built=”1″ admin_label=”Why Ardent-header” module_class=”home-head why-ardent-head” _builder_version=”4.7.3″ _module_preset=”default” background_image=”https:\/\/ardent-security.com\/\/wp-content\/uploads\/2021\/02\/Why-Ardent-Background.svg” background_position=”top_center” collapsed=”off”][et_pb_row column_structure=”1_2,1_2″ module_class=”all-services” _builder_version=”4.7.3″ _module_preset=”default”][et_pb_column type=”1_2″ _builder_version=”4.7.3″ _module_preset=”default”][et_pb_text admin_label=”Our Story” _builder_version=”4.7.3″ _module_preset=”default”]<\/p>\n
Avis de s\u00e9curit\u00e9<\/p>\n
[\/et_pb_text][et_pb_text admin_label=”Amplify” _builder_version=”4.7.3″ _module_preset=”default” custom_padding=”|34px||||”]<\/p>\n
[\/et_pb_text][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.7.3″ _module_preset=”default”][et_pb_image src=”https:\/\/ardent-security.com\/\/wp-content\/uploads\/2021\/02\/About-Us-Image-Top.png” title_text=”About Us Image Top” align=”right” _builder_version=”4.7.3″ _module_preset=”default”][\/et_pb_image][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ admin_label=”Social responsibility” module_class=”third-sec social-responsibility” _builder_version=”4.7.3″ _module_preset=”default” background_enable_color=”off” collapsed=”on”][et_pb_row _builder_version=”4.7.3″ _module_preset=”default” custom_padding=”|343px||||”][et_pb_column type=”4_4″ _builder_version=”4.7.3″ _module_preset=”default”][et_pb_text _builder_version=”4.7.3″ _module_preset=”default”]<\/p>\n
#####################################################################################<\/span><\/p>\n #<\/span><\/p>\n # Ardent Security Advisory<\/span><\/p>\n #Original Disclosure: https:\/\/www.ardent-security.com\/advisory\/ASA-2021-06\/ASA-2021-06_CVE-2021-29398.txt<\/span><\/p>\n #<\/span><\/p>\n #####################################################################################<\/span><\/p>\n #<\/span><\/p>\n # Product:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 NorthStar Club Management 6.3<\/span><\/p>\n # Vendor:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Northstar Technologies Inc<\/span><\/p>\n # URL:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 https:\/\/www.globalnorthstar.com\/<\/span><\/p>\n # ASA ID:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ASA-2021-06<\/span><\/p>\n # CVE ID:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 CVE-2021-29398<\/span><\/p>\n #CWE ID: \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 CWE-35 – Path Traversal<\/span><\/p>\n # Subject:\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Arbitrary Filesystem Browsing Via Directory Traversal<\/span><\/p>\n # Severity: \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 High<\/span><\/p>\n # Author:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Alexandre LaRocque, CEO <alarocque@ardent-security.com><\/span><\/p>\n # Date:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 2022-01-27<\/span><\/p>\n #<\/span><\/p>\n #####################################################################################<\/span><\/p>\n Description:<\/span><\/strong><\/p>\n In the <\/span>NorthStar web application<\/span>, the \u201c\/Common\/NorthFileManager\/fileManagerObjects.jsp\u201d file has a parameter named \u201cfolderPath\u201d that is vulnerable to directory traversal. This allows any remote unauthenticated user to freely browse and list the directories across the entire filesystem of the host of the web application.\u00a0 This vulnerability was identified by Ardent Security experts while performing penetration testing in Toronto, Canada. <\/span><\/p>\n Technical Description:<\/span><\/strong><\/p>\n Due to the dominant market share of the product, no proof-of-concept code is provided.<\/span><\/p>\n Affected version(s):<\/span><\/strong><\/p>\n Only NorthStar Club Management 6.3 was tested. Older versions could be vulnerable. <\/span><\/p>\n Workaround \/ Fix:<\/span><\/strong><\/p>\n It is unknown if this vulnerability has been fixed by the vendor.<\/span><\/p>\n Vulnerability Severity:<\/span><\/strong><\/p>\n CVSS v3.1 Metrics [2]:<\/span><\/p>\n – CVSS Base Score: 7.5 (High)<\/strong><\/span><\/p>\n – CVSS Vector: AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:N\/A:N<\/span><\/p>\n Timeline:<\/span><\/strong><\/p>\n 2021-03-18: Vulnerability discovery<\/span><\/p>\n 2021-03-27: Contacted vendor about the vulnerability<\/span><\/p>\n 2021-03-27: Vendor was given a 90-days period<\/span><\/p>\n 2021-06-27: Vendor was given an additional\u00a0 90-days period<\/span><\/p>\n 2021-09-27: Vendor was given an additional\u00a0 90-days period<\/span><\/p>\n 2022-01-27: Public disclosure<\/span><\/p>\n Reference:<\/span><\/strong><\/p>\n [1] https:\/\/www.ardent-security.com\/advisory\/ASA-2021-06<\/span><\/p>\n [2] https:\/\/nvd.nist.gov\/vuln-metrics\/cvss\/v3-calculator?vector=AV:N\/AC:L\/PR:H\/UI:R\/S:C\/C:H\/I:H\/A:H&version=3.1<\/span><\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>","protected":false},"excerpt":{"rendered":" [et_pb_section fb_built=”1″ admin_label=”Why Ardent-header” module_class=”home-head why-ardent-head” _builder_version=”4.7.3″ _module_preset=”default” background_image=”https:\/\/ardent-security.com\/\/wp-content\/uploads\/2021\/02\/Why-Ardent-Background.svg” background_position=”top_center” collapsed=”off”][et_pb_row column_structure=”1_2,1_2″ module_class=”all-services” _builder_version=”4.7.3″ _module_preset=”default”][et_pb_column type=”1_2″ _builder_version=”4.7.3″ _module_preset=”default”][et_pb_text admin_label=”Our Story” _builder_version=”4.7.3″ _module_preset=”default”] Ardent Security Advisory [\/et_pb_text][et_pb_text admin_label=”Amplify” _builder_version=”4.7.3″ _module_preset=”default” custom_padding=”|34px||||”] Ardent Security regularly identifies zero-day vulnerabilities and exploits in various products. We believe in responsible disclosure. [\/et_pb_text][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.7.3″ _module_preset=”default”][et_pb_image src=”https:\/\/ardent-security.com\/\/wp-content\/uploads\/2021\/02\/About-Us-Image-Top.png” title_text=”About Us Image Top” […]<\/p>","protected":false},"author":2,"featured_media":0,"parent":1746,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"class_list":["post-1785","page","type-page","status-publish","hentry"],"rttpg_featured_image_url":null,"rttpg_author":{"display_name":"Ardent Security","author_link":"https:\/\/ardent-security.com\/fr\/author\/ardentsecurity\/"},"rttpg_comment":0,"rttpg_category":null,"rttpg_excerpt":"[et_pb_section fb_built=”1″ admin_label=”Why Ardent-header” module_class=”home-head why-ardent-head” _builder_version=”4.7.3″ _module_preset=”default” background_image=”https:\/\/ardent-security.com\/\/wp-content\/uploads\/2021\/02\/Why-Ardent-Background.svg” background_position=”top_center” collapsed=”off”][et_pb_row column_structure=”1_2,1_2″ module_class=”all-services” _builder_version=”4.7.3″ _module_preset=”default”][et_pb_column type=”1_2″ _builder_version=”4.7.3″ _module_preset=”default”][et_pb_text admin_label=”Our Story” _builder_version=”4.7.3″ _module_preset=”default”] Ardent Security Advisory [\/et_pb_text][et_pb_text admin_label=”Amplify” _builder_version=”4.7.3″ _module_preset=”default” custom_padding=”|34px||||”] Ardent Security regularly identifies zero-day vulnerabilities and exploits in various products. We believe in responsible disclosure. [\/et_pb_text][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.7.3″ _module_preset=”default”][et_pb_image src=”https:\/\/ardent-security.com\/\/wp-content\/uploads\/2021\/02\/About-Us-Image-Top.png” title_text=”About Us Image Top”\u2026","_links":{"self":[{"href":"https:\/\/ardent-security.com\/fr\/wp-json\/wp\/v2\/pages\/1785","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ardent-security.com\/fr\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/ardent-security.com\/fr\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/ardent-security.com\/fr\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/ardent-security.com\/fr\/wp-json\/wp\/v2\/comments?post=1785"}],"version-history":[{"count":0,"href":"https:\/\/ardent-security.com\/fr\/wp-json\/wp\/v2\/pages\/1785\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/ardent-security.com\/fr\/wp-json\/wp\/v2\/pages\/1746"}],"wp:attachment":[{"href":"https:\/\/ardent-security.com\/fr\/wp-json\/wp\/v2\/media?parent=1785"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}