PT-2013-5293 · Bmc · Bmc Service Desk Express

Nuri Fattah · Published 2013-07-29 · Updated 2013-07-30 · CVE-2013-4945

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BMC Service Desk Express (SDE) version 10.2.1.95

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several cookie parameters to the "DashBoardGUI.aspx" endpoint, including ASPSESSIONIDASSRATTQ, TABLE WIDGET 1, TABLE WIDGET 2, browserDateTimeInfo, and browserNumberInfo. Additionally, the UID parameter to the "login.aspx" endpoint is vulnerable.

Recommendations For BMC Service Desk Express (SDE) version 10.2.1.95, consider restricting access to the "DashBoardGUI.aspx" and "login.aspx" endpoints until a patch is available. As a temporary workaround, avoid using the vulnerable parameters ASPSESSIONIDASSRATTQ, TABLE WIDGET 1, TABLE WIDGET 2, browserDateTimeInfo, browserNumberInfo, and UID in the respective endpoints.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2013-4945

Affected Products

Bmc Service Desk Express

References · 5

• 🔥 http://exploit-db.com/exploits/26806 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2013-07/0082.html · Exploit
• 🔥 https://exploit-db.com/exploits/26806 · Exploit
• 🔥 http://securityfocus.com/bid/61147 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-4945 · Security Note