CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2014-5361

Multiple cross-site request forgery (CSRF) vulnerabilities in Landesk Management Suite 9.6 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) start, (2) stop, or (3) restart services via a request to remote/serverServices.aspx.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 37.4%

CVSS Severity

CVSS v2 Score 6.8

References

http://packetstormsecurity.com/files/131496/Landesk-Management-Suite-9.5-RFI-CSRF.html
http://www.securityfocus.com/archive/1/535286/100/0/threaded
http://packetstormsecurity.com/files/131496/Landesk-Management-Suite-9.5-RFI-CSRF.html
http://www.securityfocus.com/archive/1/535286/100/0/threaded

Products affected by CVE-2014-5361

Landesk » Landesk Management Suite » Version: N/A

cpe:2.3:a:landesk:landesk_management_suite:-
Landesk » Landesk Management Suite » Version: 8.7

cpe:2.3:a:landesk:landesk_management_suite:8.7
Landesk » Landesk Management Suite » Version: 8.8

cpe:2.3:a:landesk:landesk_management_suite:8.8
Landesk » Landesk Management Suite » Version: 9.6

cpe:2.3:a:landesk:landesk_management_suite:9.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-5361

Products

Pricing

Contact Us