CVE-2015-1480

概要

参考情報

• osvdb.org/show/osvdb/117499
• packetstormsecurity.com/files/130081/ManageEngine-ServiceDesk-Plus-9.0-Privilege-Escalation.html · Exploit
• exploit-db.com/exploits/35904 · Exploit
• manageengine.com/products/service-desk/readme-9.0.html · Vendor Advisory
• rewterz.com/vulnerabilities/manageengine-servicedesk-plus-user-privileges-management-vulnerability · Exploit
• securityfocus.com/archive/1/534538/100/0/threaded
• securityfocus.com/bid/72302

servicedesk plus のその他の脆弱性

• CVE-2012-2585中 4.3Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ServiceDesk Plus 8.1 allow remote attackers to inject arbitrary web scri…
• CVE-2011-1510中 4.3Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus (SDP) before 8012 allows remote attackers to …
• CVE-2011-1509中 5.0The encryptPassword function in Login.js in ManageEngine ServiceDesk Plus (SDP) 8012 and earlier uses a Caesar cipher for encryption of pass…
• CVE-2011-2757中 5.0Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read …
• CVE-2011-2756中 5.0FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authentication, which allows remote attackers to re…