⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2014-5005

HIGH · 7.5 CVSS Gepubliceerd: 21-10-2014 CWE-22

Beschrijving

Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers to execute arbitrary code via a .. (dot dot) in the fileName parameter in an LFU action to statusUpdate.

Vendors

Zohocorp

Affected products

Manageengine Desktop Central

References

osvdb.org
seclists.org
www.exploit-db.com
raw.githubusercontent.com
www.manageengine.com