CVE-2015-4664

Mô tả

Tham khảo

• packetstormsecurity.com/files/132809/Xceedium-Xsuite-Command-Injection-XSS-Traversal-Escalation.html · Exploit
• modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt · Exploit
• support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html · Vendor Advisory
• exploit-db.com/exploits/37708 · Exploit

Lỗ hổng khác của privileged access manager

• CVE-2019-7392NGHIÊM TRỌNG 9.1An improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager and jk-status allows a remote attacker to gai…
• CVE-2018-9029NGHIÊM TRỌNG 9.8An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks.
• CVE-2018-9028CAO 7.5Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking.
• CVE-2018-9026CAO 7.5A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafte…
• CVE-2018-9025CAO 7.5An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted inp…