CVE-2014-3738

概要

参考情報

• packetstormsecurity.com/files/127623/Zenoss-Monitoring-System-4.2.5-2108-Cross-Site-Scripting.html · Exploit
• exploit-db.com/exploits/34165 · Exploit
• openwall.com/lists/oss-security/2014/05/14/5
• openwall.com/lists/oss-security/2014/05/15/5
• securityfocus.com/bid/67396
• youtube.com/watch · Exploit

zenoss のその他の脆弱性

• CVE-2019-14258高 7.5The XML-RPC subsystem in Zenoss 2.5.3 allows XXE attacks that lead to unauthenticated information disclosure via port 9988.
• CVE-2019-14257高 7.8pyraw in Zenoss 2.5.3 allows local privilege escalation by modifying environment variables to redirect execution before privileges are dropp…
• CVE-2014-3739中 5.8Open redirect vulnerability in zport/acl_users/cookieAuthHelper/login_form in Zenoss 4.2.5 allows remote attackers to redirect users to arbi…
• CVE-2010-0713中 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in Zenoss 2.3.3, and other versions before 2.5, allow remote attackers to hijack …
• CVE-2010-0712中 6.5Multiple SQL injection vulnerabilities in zport/dmd/Events/getJSONEventsInfo in Zenoss 2.3.3, and other versions before 2.5, allow remote au…