CVE-2019-8385 : What You Need to Know

Thomson Reuters Desktop Extensions 1.9.0.358 has a critical vulnerability that allows unauthenticated directory traversal and local file inclusion, potentially leading to sensitive data exposure and remote code execution.

Understanding CVE-2019-8385

What is CVE-2019-8385?

An unauthenticated directory traversal and local file inclusion vulnerability in Thomson Reuters Desktop Extensions 1.9.0.358 enables a remote attacker to access sensitive file contents and potentially escalate privileges.

The Impact of CVE-2019-8385

This vulnerability could result in unauthorized access to sensitive data, including SAM and SYSTEM database files, and allow for remote code execution.

Technical Details of CVE-2019-8385

Vulnerability Description

Thomson Reuters Desktop Extensions 1.9.0.358 is susceptible to a flaw that permits unauthenticated directory traversal and local file inclusion, posing a severe security risk.

Affected Systems and Versions

Product: Thomson Reuters Desktop Extensions 1.9.0.358
Versions: Not specified

Exploitation Mechanism

The vulnerability allows attackers to use .. to port 6677 to view or extract sensitive file contents, potentially leading to privilege escalation and remote code execution.

Mitigation and Prevention

Immediate Steps to Take

Apply security patches or updates provided by Thomson Reuters promptly.
Implement network segmentation to limit access to vulnerable systems.
Monitor network traffic for any suspicious activity.

Long-Term Security Practices

Conduct regular security assessments and penetration testing.
Educate users on safe browsing habits and phishing awareness.

Patching and Updates

Thomson Reuters should release patches addressing the vulnerability to prevent exploitation and enhance system security.