Summary
Multiple ManageEngine Products are prone to an arbitrary-file-upload vulnerability.
Impact
An attacker may leverage this issue to upload arbitrary files to the affected computer
this can result in arbitrary code execution within the context of the vulnerable application.
Solution
Ask the vendor for an update
Affected
ManageEngine DesktopCentral versions 7 through 9 build 90054 ManageEngine DesktopCentral MSP
Detection
Check if it is possible to upload a file.
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2014-5005, CVE-2014-5006 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities