« Volver al listado

CVE-2019-25258

Estado: AnalizadaAlta (7.1)—

LogicalDOC Enterprise 7.7.4 contains multiple post-authentication file disclosure vulnerabilities that allow attackers to read arbitrary files through unverified 'suffix' and 'fileVersion' parameters. Attackers can exploit directory traversal techniques in /thumbnail and /convertpdf endpoints to access sensitive system files like win.ini and /etc/passwd by manipulating path traversal sequences.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Acceso de red (AV:N) con privilegios requeridos (PR:L) a servicios remotos (LogicalDOC) mediante path traversal en endpoints /thumbnail y /convertpdf para lectura de archivos arbitrarios.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Vulnerability ScanningThreat Intelligence ProgramPrivileged Account ManagementNetwork SegmentationDisable or Remove Feature or ProgramApplication Isolation and Sandboxing

Tecnologías afectadas (1)

Logicaldoc — Logicaldoc

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-25258",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2019-25258",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-12-24T20:00:31.787270Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "disclosure@vulncheck.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "disclosure@vulncheck.com",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 7.1,
          "Automatable": "NOT_DEFINED",
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "NONE",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "disclosure@vulncheck.com",
      "affectedData": [
        {
          "vendor": "LogicalDOC Srl",
          "product": "LogicalDOC Enterprise",
          "versions": [
            {
              "status": "affected",
              "version": "7.7.4"
            },
            {
              "status": "affected",
              "version": "7.7.3"
            },
            {
              "status": "affected",
              "version": "7.7.2"
            },
            {
              "status": "affected",
              "version": "7.7.1"
            },
            {
              "status": "affected",
              "version": "7.6.4"
            },
            {
              "status": "affected",
              "version": "7.6.2"
            },
            {
              "status": "affected",
              "version": "7.5.1"
            },
            {
              "status": "affected",
              "version": "7.4.2"
            },
            {
              "status": "affected",
              "version": "7.1.1"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-12-24T20:15:54.627",
  "references": [
    {
      "url": "https://www.exploit-db.com/exploits/44019",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "disclosure@vulncheck.com"
    },
    {
      "url": "https://www.logicaldoc.com",
      "tags": [
        "Product"
      ],
      "source": "disclosure@vulncheck.com"
    },
    {
      "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5450.php",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "disclosure@vulncheck.com"
    },
    {
      "url": "https://www.exploit-db.com/exploits/44019",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    },
    {
      "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5450.php",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "disclosure@vulncheck.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "LogicalDOC Enterprise 7.7.4 contains multiple post-authentication file disclosure vulnerabilities that allow attackers to read arbitrary files through unverified 'suffix' and 'fileVersion' parameters. Attackers can exploit directory traversal techniques in /thumbnail and /convertpdf endpoints to access sensitive system files like win.ini and /etc/passwd by manipulating path traversal sequences."
    }
  ],
  "lastModified": "2026-06-17T02:31:54.147",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:logicaldoc:logicaldoc:7.1.1:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "291DCC81-EBA8-499C-9D72-D1BC8265C8C9"
            },
            {
              "criteria": "cpe:2.3:a:logicaldoc:logicaldoc:7.4.2:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "12C52CB1-9559-4C10-BEF6-77CB7C29D919"
            },
            {
              "criteria": "cpe:2.3:a:logicaldoc:logicaldoc:7.5.1:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F0EFAC94-B176-4D38-8401-711EAB4AD8B0"
            },
            {
              "criteria": "cpe:2.3:a:logicaldoc:logicaldoc:7.6.2:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E7F66DA8-DAF0-4E45-B732-B86260E53114"
            },
            {
              "criteria": "cpe:2.3:a:logicaldoc:logicaldoc:7.6.4:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E319006E-3C11-4E2A-A06A-AC4755EE75AB"
            },
            {
              "criteria": "cpe:2.3:a:logicaldoc:logicaldoc:7.7.1:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5970327C-EFE4-4FC6-8FF3-72763A07B825"
            },
            {
              "criteria": "cpe:2.3:a:logicaldoc:logicaldoc:7.7.2:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EF8C6B1F-E466-4F8D-93D8-42A51484BCD4"
            },
            {
              "criteria": "cpe:2.3:a:logicaldoc:logicaldoc:7.7.3:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35556D50-AA9C-42C3-B062-C7BA3D7D51FE"
            },
            {
              "criteria": "cpe:2.3:a:logicaldoc:logicaldoc:7.7.4:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D6AE494B-3C50-45A1-8437-1FD7256B3C30"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "disclosure@vulncheck.com"
}