NVD

Id
36048  
Name
CVE-2014-9331  
Description
Cross-site request forgery (CSRF) vulnerability in ZOHO ManageEngine Desktop Central before 9 build 90130 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via an addUser action to STATE_ID/1417736606982/roleMgmt.do.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-02-04  
Modified Date
2015-02-04  
Seq
2014-9331  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
184371 36048 CVE-2014-9331 http://packetstormsecurity.com/files/130219/ManageEngine-Desktop-Central-9-Cross-Site-Request-Forgery.html  View
184372 36048 CVE-2014-9331 35980  View
184373 36048 CVE-2014-9331 http://www.manageengine.com/products/desktop-central/cve20149331-cross-site-request-forgery.html  View
184374 36048 CVE-2014-9331 20150202 [CVE-2014-9331] ManageEngine Desktop Central CSRF vulnerability to add an Admin user advisory  View
184375 36048 CVE-2014-9331 72464  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18949 JVNDB-2014-007824 ZOHO ManageEngine Desktop Central におけるクロスサイトリクエストフォージェリの脆弱性 ZOHO ManageEngine Desktop Central には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2014-9331 76624 CVE-2014-9331 36048 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007824.html 2014-12-07 2015-02-12 View