3.2.1 Arbitrary File Read in insecure .NET Remoting TCP Channel

The IntelliSpace portal application utilizes .NET Remoting for its functionality. The vulnerability arises from the exploitation of port 755 through the "Object Marshalling" technique, which allows an attacker to read internal files without any authentication. This is possible by crafting specific .NET Remoting URLs derived from information enumerated in the client-side configuration files. This issue affects IntelliSpace Portal: 12 and prior.

N/A

对路径名的限制不恰当(路径遍历)

Philips IntelliSpace Portal 路径遍历漏洞

Philips IntelliSpace Portal是荷兰飞利浦（Philips）公司的一款高级医学影像分析平台，提供多模态图像处理和自动化诊断工具。 Philips IntelliSpace Portal 12及之前版本存在路径遍历漏洞，该漏洞源于通过Object Marshalling技术利用端口755可能导致未授权读取内部文件。

N/A

N/A