CVE

Id
73342  
CVE No.
CVE-2014-6043  
Status
Candidate  
Description
ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database browser, which allows remote authenticated users to obtain access to the database via a direct request to event/runQuery.do.  
Phase
Assigned (20140901)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
687879 73342 CVE-2014-6043 EXPLOIT-DB:34519  View
687880 73342 CVE-2014-6043 URL:http://www.exploit-db.com/exploits/34519  View
687881 73342 CVE-2014-6043 FULLDISC:20140831 Mogwai Security Advisory MSA-2014-01: ManageEngine EventLog Analyzer Multiple Vulnerabilities  View
687882 73342 CVE-2014-6043 URL:http://seclists.org/fulldisclosure/2014/Aug/86  View
687883 73342 CVE-2014-6043 FULLDISC:20140903 Re: Mogwai Security Advisory MSA-2014-01: ManageEngine EventLog Analyzer Multiple Vulnerabilities  View
687884 73342 CVE-2014-6043 URL:http://seclists.org/fulldisclosure/2014/Sep/19  View
687885 73342 CVE-2014-6043 MISC:http://packetstormsecurity.com/files/128102/ManageEngine-EventLog-Analyzer-9.9-Authorization-Code-Execution.html  View
687886 73342 CVE-2014-6043 MISC:https://www.mogwaisecurity.de/advisories/MSA-2014-01.txt  View
687887 73342 CVE-2014-6043 BID:69482  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15620 JVNDB-2014-004495 LibVNCServer の vncviewer.c の MallocFrameBuffer 関数における整数オーバーフローの脆弱性 LibVNCServer の vncviewer.c の MallocFrameBuffer 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2014-6051 73342 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004495.html  View