CVE-2016-1593
Novell ServiceDesk 6.5/7.0.3/7.1.0 - Multiple Vulnerabilities
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
2Exploited in Wild
-Decision
Descriptions
Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. (dot dot) in a filename within a multipart/form-data POST request to a LiveTime.woa URL.
Vulnerabilidad de salto de directorio en la característica importar usuarios en Micro Focus Novell Service Desk en versiones anteriores a 7.2 permite a administradores autenticados remotos cargar y ejecutar archivos JSP arbitrarios a través de un .. (punto punto) en un nombre de archivo dentro de una petición multipart/form-data POST a una URL LiveTime.woa.
Novell Service Desk versions 7.1.0 and below suffer from code execution, information disclosure, cross site scripting, remote file upload, HQL injection, and traversal vulnerabilities.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2016-01-12 CVE Reserved
- 2016-04-11 CVE Published
- 2024-07-23 EPSS Updated
- 2024-08-05 CVE Updated
- 2024-08-05 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| http://packetstormsecurity.com/files/136717/Novell-ServiceDesk-Authenticated-File-Upload.html | X_refsource_misc |
|
| http://www.rapid7.com/db/modules/exploit/multi/http/novell_servicedesk_rce | X_refsource_misc | |
| http://www.securityfocus.com/archive/1/538043/100/0/threaded | Mailing List | |
| https://packetstormsecurity.com/files/136646 | X_refsource_misc |
|
| https://raw.githubusercontent.com/pedrib/PoC/master/advisories/novell-service-desk-7.1.0.txt | X_refsource_misc | |
| https://www.novell.com/support/kb/doc.php?id=7017428 | X_refsource_confirm |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/39687 | 2024-08-05 | |
| https://www.exploit-db.com/exploits/39708 | 2024-08-05 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Novell Search vendor "Novell" | Service Desk Search vendor "Novell" for product "Service Desk" | <= 7.1 Search vendor "Novell" for product "Service Desk" and version " <= 7.1" | - |
Affected
| ||||||