PT-2017-5957 · Landesk · Landesk Management Suite

Published 2017-09-19 · Updated 2018-10-09 · CVE-2014-5362

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Landesk Management Suite versions 9.6 and earlier

Description: The issue allows remote attackers to conduct remote file inclusion attacks involving ASPX pages from third-party sites. This can be achieved via the d parameter to API endpoints such as "ldms/sm actionfrm.asp" or "remote/frm coremainfrm.aspx", or the top parameter to "remote/frm splitfrm.aspx".

Recommendations: For Landesk Management Suite versions 9.6 and earlier, consider restricting access to the admin interface and limiting the use of the d and top parameters in the affected API endpoints until a fix is available. As a temporary workaround, disabling the remote file inclusion functionality may help minimize the risk of exploitation.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2014-5362

Affected Products

Landesk Management Suite

References · 5

• 🔥 http://packetstormsecurity.com/files/131496/Landesk-Management-Suite-9.5-RFI-CSRF.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-5362 · Security Note
• http://securityfocus.com/archive/1/535286/100/1100/threaded · Note
• http://securitytracker.com/id/1032203 · Note
• http://securityfocus.com/bid/74190 · Note