NVD

Id
29242  
Name
CVE-2014-0344  
Description
Properties.do in ZOHO ManageEngine OpStor before build 8500 does not properly check privilege levels, which allows remote authenticated users to obtain Admin access by using the name parameter in conjunction with a true value of the edit parameter.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-03-29  
Modified Date
2015-07-24  
Seq
2014-0344  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
154921 29242 CVE-2014-0344 VU#140886  View
154922 29242 CVE-2014-0344 66499  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12949 JVNDB-2014-001824 ManageEngine OpStor に複数の脆弱性 Zoho が提供する ManageEngine OpStor には、複数の脆弱性が存在します。 CVE-2014-0344 67745 CVE-2014-0344 29242 6.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001824.html 2014-03-27 2014-04-01 View