CVE-2015-4668

概要

参考情報

• modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt · Exploit
• securityfocus.com/archive/1/536058/100/0/threaded
• support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html
• exploit-db.com/exploits/37708 · Exploit

xsuite のその他の脆弱性

• CVE-2015-4664緊急 9.8An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary …
• CVE-2015-4669高 7.8The MySQL "root" user in Xsuite 2.x does not have a password set, which allows local users to access databases on the system.
• CVE-2015-4667緊急 9.8Multiple hardcoded credentials in Xsuite 2.x.
• CVE-2015-4666中 5.0Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attackers to read arbitrar…
• CVE-2015-4665中 4.3Cross-site scripting (XSS) vulnerability in ajax_cmd.php in Xceedium Xsuite 2.4.4.1 and earlier allows remote attackers to inject arbitrary …