NVD

Id
33807  
Name
CVE-2014-6261  
Description
Zenoss Core through 5 Beta 3 does not properly implement the Check For Updates feature, which allows remote attackers to execute arbitrary code by (1) spoofing the callhome server or (2) deploying a crafted web site that is visited during a login session, aka ZEN-12657.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-12-15  
Modified Date
2016-03-21  
Seq
2014-6261  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
175393 33807 CVE-2014-6261 VU#449452  View
175394 33807 CVE-2014-6261 https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18362 JVNDB-2014-007237 Zenoss Core における任意のコードを実行される脆弱性 Zenoss Core は、アップデート機能に対するチェックを適切に実装しないため、任意のコードを実行される脆弱性が存在します。 CVE-2014-6261 73552 CVE-2014-6261 33807 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007237.html 2014-12-05 2014-12-17 View