PT-2017-5957 · Landesk · Landesk Management Suite

Publicado 2017-09-19 · Atualizado 2018-10-09 · CVE-2014-5362

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Landesk Management Suite versions 9.6 and earlier

Description: The issue allows remote attackers to conduct remote file inclusion attacks involving ASPX pages from third-party sites. This can be achieved via the d parameter to API endpoints such as "ldms/sm actionfrm.asp" or "remote/frm coremainfrm.aspx", or the top parameter to "remote/frm splitfrm.aspx".

Recommendations: For Landesk Management Suite versions 9.6 and earlier, consider restricting access to the admin interface and limiting the use of the d and top parameters in the affected API endpoints until a fix is available. As a temporary workaround, disabling the remote file inclusion functionality may help minimize the risk of exploitation.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-5362

Produtos afetados

Landesk Management Suite

Referências · 5

• 🔥 http://packetstormsecurity.com/files/131496/Landesk-Management-Suite-9.5-RFI-CSRF.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-5362 · Nota de Segurança
• http://securityfocus.com/archive/1/535286/100/1100/threaded · Nota
• http://securitytracker.com/id/1032203 · Nota
• http://securityfocus.com/bid/74190 · Nota