Test ID:	1.3.6.1.4.1.25623.1.0.805226
Category:	Web application abuses
Title:	Plex Media Server < 0.9.9.3 Multiple Vulnerabilities
Summary:	Plex Media Server is prone to multiple vulnerabilities.
Description:	Summary: Plex Media Server is prone to multiple vulnerabilities. Vulnerability Insight: The following flaws exist: - CVE-2014-9304: An error in '/system/proxy' which fails to validate pre-authentication user requests. - CVE-2014-9181: Input appended to the URL after 'manage', 'web' and 'resources' is not properly sanitised before being used to read files. Vulnerability Impact: Successful exploitation will allow remote attackers to disclose certain sensitive information and bypass certain security restrictions. Affected Software/OS: Plex Media Server versions 0.9.9.2.374-aa23a69 and prior. Solution: Update to version 0.9.9.3 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-9181 Bugtraq: 20140228 SEC Consult SA-20140228-1 :: Authentication bypass (SSRF) and local file disclosure in Plex Media Server (Google Search) http://www.securityfocus.com/archive/1/531290 https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140228-1_Plex_Media_Server_Authentication_bypass_local_file_disclosure_v10.txt Common Vulnerability Exposure (CVE) ID: CVE-2014-9304
Copyright	Copyright (C) 2014 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.