PT-2014-6476 · Zoho · It360+1

Published 2014-12-04 · Updated 2019-07-15 · CVE-2014-5445

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ManageEngine Netflow Analyzer versions 8.6 through 10.2 IT360 version 10.3

Description The issue allows remote attackers or remote authenticated users to read arbitrary files via a full pathname in the schFilePath parameter to the CSVServlet or CReportPDFServlet servlet. This can lead to information disclosure.

Recommendations For ManageEngine Netflow Analyzer versions 8.6 through 10.2, avoid using the schFilePath parameter in the CSVServlet or CReportPDFServlet servlet until a fix is available. For IT360 version 10.3, restrict access to the CReportPDFServlet servlet to minimize the risk of exploitation. As a temporary workaround, consider disabling the CSVServlet and CReportPDFServlet servlets until a patch is available.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2014-5445

ZDI-15-138

Affected Products

It360

Zoho Manageengine Netflow Analyzer

References · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/netflow_file_download.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/pull/4282 · Exploit
• 🔥 http://securityfocus.com/bid/71404 · Exploit
• 🔥 https://exploit-db.com/exploits/43895 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2014/Dec/9 · Exploit
• 🔥 http://packetstormsecurity.com/files/129336/ManageEngine-Netflow-Analyzer-IT360-File-Download.html · Exploit
• 🔥 https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_netflow_it360_file_dl.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-5445 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-138 · Security Note
• https://support.zoho.com/portal/manageengine/helpcenter/articles/cve-2014-5445-cve-2014-5446-fix-for-arbitrary-file-download · Vendor Advisory
• http://securityfocus.com/archive/1/534141/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/99045 · Note
• http://securityfocus.com/archive/1/534122/100/0/threaded · Note