CVE-2017-12815 : What You Need to Know

This CVE involves a path traversal vulnerability in the Bomgar Remote Support Portal JavaStart.jar Applet, potentially allowing unauthorized access to files outside the intended directory.

Understanding CVE-2017-12815

What is CVE-2017-12815?

The vulnerability in the JavaStart.jar Applet version 52790 and earlier allows attackers to access files outside the intended directory, potentially leading to unauthorized file manipulation on the operating system.

The Impact of CVE-2017-12815

Exploiting this vulnerability could grant attackers the ability to create, modify, or delete files in the operating system using the privileges of the user who executed the Java applet.

Technical Details of CVE-2017-12815

Vulnerability Description

Path traversal vulnerability in Bomgar Remote Support Portal JavaStart.jar Applet
Access files outside the intended directory

Affected Systems and Versions

Product: Not applicable
Vendor: Not applicable
Versions affected: JavaStart.jar Applet version 52790 and prior

Exploitation Mechanism

Vulnerability can be exploited by invoking the affected archive through designated Bomgar Remote Support Portal deployment
Callable from any website using <object> and/or <appletHTML> tags

Mitigation and Prevention

Immediate Steps to Take

Disable or remove the JavaStart.jar Applet from the Bomgar Remote Support Portal deployment
Implement network segmentation to limit access to the vulnerable component

Long-Term Security Practices

Regularly update and patch software to address known vulnerabilities
Conduct security assessments and penetration testing to identify and remediate weaknesses

Patching and Updates

Apply patches or updates provided by the vendor to fix the path traversal vulnerability