NVD

Id
24747  
Name
CVE-2015-2746  
Description
The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series appliances before 7.8.4 Hotfix 02 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the "second" parameter of a command, as demonstrated by the Destination parameter in the ping command.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-03-26  
Modified Date
2016-12-02  
Seq
2015-2746  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
130613 24747 CVE-2015-2746 http://packetstormsecurity.com/files/130899/Websense-Appliance-Manager-Command-Injection.html  View
130614 24747 CVE-2015-2746 20150318 Command injection vulnerability in network diagnostics tool of Websense Appliance Manager  View
130615 24747 CVE-2015-2746 20150318 Command injection vulnerability in network diagnostics tool of Websense Appliance Manager  View
130616 24747 CVE-2015-2746 http://www.websense.com/support/article/kbarticle/October-2014-Hotfix-Summary-for-Websense-Solutions  View
130617 24747 CVE-2015-2746 36423  View
130618 24747 CVE-2015-2746 https://www.securify.nl/advisory/SFY20140906/command_injection_vulnerability_in_network_diagnostics_tool_of_websense_appliance_manager.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6642 JVNDB-2015-001962 Websense TRITON および Websense V シリーズ アプライアンスにおける任意のコマンドを実行される脆弱性 Websense TRITON および Websense V シリーズ アプライアンスの Appliance Manager コマンドラインユーティリティ (CLU) のネットワーク診断ツール (CommandLineServlet) には、任意のコマンドを実行される脆弱性が存在します。 CVE-2015-2746 79971 CVE-2015-2746 24747 6.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001962.html 2015-03-18 2015-03-30 View