CVE-2015-4665

Description

References

• packetstormsecurity.com/files/132809/Xceedium-Xsuite-Command-Injection-XSS-Traversal-Escalation.html · Exploit
• modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt · Exploit
• support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html
• exploit-db.com/exploits/37708

xsuite 的其他漏洞

• CVE-2015-4664严重 9.8An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary …
• CVE-2015-4669高危 7.8The MySQL "root" user in Xsuite 2.x does not have a password set, which allows local users to access databases on the system.
• CVE-2015-4668中危 6.1Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phish…
• CVE-2015-4667严重 9.8Multiple hardcoded credentials in Xsuite 2.x.
• CVE-2015-4666中危 5.0Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attackers to read arbitrar…