PT-2013-5293 · Bmc · Bmc Service Desk Express

Nuri Fattah · Publicado 2013-07-29 · Atualizado 2013-07-30 · CVE-2013-4945

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BMC Service Desk Express (SDE) version 10.2.1.95

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several cookie parameters to the "DashBoardGUI.aspx" endpoint, including ASPSESSIONIDASSRATTQ, TABLE WIDGET 1, TABLE WIDGET 2, browserDateTimeInfo, and browserNumberInfo. Additionally, the UID parameter to the "login.aspx" endpoint is vulnerable.

Recommendations For BMC Service Desk Express (SDE) version 10.2.1.95, consider restricting access to the "DashBoardGUI.aspx" and "login.aspx" endpoints until a patch is available. As a temporary workaround, avoid using the vulnerable parameters ASPSESSIONIDASSRATTQ, TABLE WIDGET 1, TABLE WIDGET 2, browserDateTimeInfo, browserNumberInfo, and UID in the respective endpoints.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2013-4945

Produtos afetados

Bmc Service Desk Express

Referências · 5

• 🔥 http://exploit-db.com/exploits/26806 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2013-07/0082.html · Exploit
• 🔥 https://exploit-db.com/exploits/26806 · Exploit
• 🔥 http://securityfocus.com/bid/61147 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-4945 · Nota de Segurança