CVE-2020-14011

概要

参考情報

• packetstormsecurity.com/files/158205/Lansweeper-7.2-Default-Account-Remote-Code-Execution.html · Third Party Advisory
• pastebin.com/EUkMx94X · Third Party Advisory
• lansweeper.com/knowledgebase/restricting-access-to-the-web-console · Vendor Advisory

lansweeper のその他の脆弱性

• CVE-2022-32763中 6.1A cross-site scripting (xss) sanitization vulnerability bypass exists in the SanitizeHtml functionality of Lansweeper lansweeper 10.1.1.0. A…
• CVE-2022-32573高 8.8A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lansweeper 10.1.1.0. A specially-craf…
• CVE-2022-29517高 8.8A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality of Lansweeper lansweeper 10.1.1.0. A speci…
• CVE-2022-29511中 6.5A directory traversal vulnerability exists in the KnowledgebasePageActions.aspx ImportArticles functionality of Lansweeper lansweeper 10.1.1…
• CVE-2022-28703中 5.4A stored cross-site scripting vulnerability exists in the HdConfigActions.aspx altertextlanguages functionality of Lansweeper lansweeper 10.…