Search
Find a vulnerability
Search criteria
2 vulnerabilities found for desktop_central by zohocorp
CVE-2014-7862 (GCVE-0-2014-7862)
Vulnerability from nvd – Published: 2018-01-04 17:00 – Updated: 2024-08-06 13:03
VLAI
EPSS
VEX
Summary
The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://packetstormsecurity.com/files/129769/Deskt… | x_refsource_MISC |
| https://github.com/pedrib/PoC/blob/master/advisor… | x_refsource_MISC |
| http://www.securityfocus.com/bid/71849 | vdb-entryx_refsource_BID |
| http://www.securityfocus.com/archive/1/534356/100… | mailing-listx_refsource_BUGTRAQ |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| https://www.manageengine.com/products/desktop-cen… | x_refsource_CONFIRM |
| https://www.rapid7.com/db/modules/auxiliary/admin… | x_refsource_MISC |
| http://seclists.org/fulldisclosure/2015/Jan/2 | mailing-listx_refsource_FULLDISC |
Date Public
2014-12-31 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T13:03:27.573Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://packetstormsecurity.com/files/129769/Desktop-Central-Add-Administrator.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/pedrib/PoC/blob/master/advisories/ManageEngine/me_dc9_admin.txt"
},
{
"name": "71849",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/71849"
},
{
"name": "20141231 [The ManageOwnage Series, part X]: 0-day administrator account creation in Desktop Central",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/534356/100/0/threaded"
},
{
"name": "desktopcentral-cve20147862-sec-bypass(99595)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/99595"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://www.manageengine.com/products/desktop-central/cve20147862-unauthorized-account-creation.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.rapid7.com/db/modules/auxiliary/admin/http/manage_engine_dc_create_admin"
},
{
"name": "20150102 [The ManageOwnage Series, part X]: 0-day administrator account creation in Desktop Central",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2015/Jan/2"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2014-12-31T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-09T18:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://packetstormsecurity.com/files/129769/Desktop-Central-Add-Administrator.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/pedrib/PoC/blob/master/advisories/ManageEngine/me_dc9_admin.txt"
},
{
"name": "71849",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/71849"
},
{
"name": "20141231 [The ManageOwnage Series, part X]: 0-day administrator account creation in Desktop Central",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/534356/100/0/threaded"
},
{
"name": "desktopcentral-cve20147862-sec-bypass(99595)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/99595"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://www.manageengine.com/products/desktop-central/cve20147862-unauthorized-account-creation.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.rapid7.com/db/modules/auxiliary/admin/http/manage_engine_dc_create_admin"
},
{
"name": "20150102 [The ManageOwnage Series, part X]: 0-day administrator account creation in Desktop Central",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://seclists.org/fulldisclosure/2015/Jan/2"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2014-7862",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://packetstormsecurity.com/files/129769/Desktop-Central-Add-Administrator.html",
"refsource": "MISC",
"url": "http://packetstormsecurity.com/files/129769/Desktop-Central-Add-Administrator.html"
},
{
"name": "https://github.com/pedrib/PoC/blob/master/advisories/ManageEngine/me_dc9_admin.txt",
"refsource": "MISC",
"url": "https://github.com/pedrib/PoC/blob/master/advisories/ManageEngine/me_dc9_admin.txt"
},
{
"name": "71849",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/71849"
},
{
"name": "20141231 [The ManageOwnage Series, part X]: 0-day administrator account creation in Desktop Central",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/534356/100/0/threaded"
},
{
"name": "desktopcentral-cve20147862-sec-bypass(99595)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/99595"
},
{
"name": "https://www.manageengine.com/products/desktop-central/cve20147862-unauthorized-account-creation.html",
"refsource": "CONFIRM",
"url": "https://www.manageengine.com/products/desktop-central/cve20147862-unauthorized-account-creation.html"
},
{
"name": "https://www.rapid7.com/db/modules/auxiliary/admin/http/manage_engine_dc_create_admin",
"refsource": "MISC",
"url": "https://www.rapid7.com/db/modules/auxiliary/admin/http/manage_engine_dc_create_admin"
},
{
"name": "20150102 [The ManageOwnage Series, part X]: 0-day administrator account creation in Desktop Central",
"refsource": "FULLDISC",
"url": "http://seclists.org/fulldisclosure/2015/Jan/2"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2014-7862",
"datePublished": "2018-01-04T17:00:00.000Z",
"dateReserved": "2014-10-05T00:00:00.000Z",
"dateUpdated": "2024-08-06T13:03:27.573Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2014-7862 (GCVE-0-2014-7862)
Vulnerability from cvelistv5 – Published: 2018-01-04 17:00 – Updated: 2024-08-06 13:03
VLAI
EPSS
VEX
Summary
The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://packetstormsecurity.com/files/129769/Deskt… | x_refsource_MISC |
| https://github.com/pedrib/PoC/blob/master/advisor… | x_refsource_MISC |
| http://www.securityfocus.com/bid/71849 | vdb-entryx_refsource_BID |
| http://www.securityfocus.com/archive/1/534356/100… | mailing-listx_refsource_BUGTRAQ |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| https://www.manageengine.com/products/desktop-cen… | x_refsource_CONFIRM |
| https://www.rapid7.com/db/modules/auxiliary/admin… | x_refsource_MISC |
| http://seclists.org/fulldisclosure/2015/Jan/2 | mailing-listx_refsource_FULLDISC |
Date Public
2014-12-31 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T13:03:27.573Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://packetstormsecurity.com/files/129769/Desktop-Central-Add-Administrator.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/pedrib/PoC/blob/master/advisories/ManageEngine/me_dc9_admin.txt"
},
{
"name": "71849",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/71849"
},
{
"name": "20141231 [The ManageOwnage Series, part X]: 0-day administrator account creation in Desktop Central",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/534356/100/0/threaded"
},
{
"name": "desktopcentral-cve20147862-sec-bypass(99595)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/99595"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://www.manageengine.com/products/desktop-central/cve20147862-unauthorized-account-creation.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.rapid7.com/db/modules/auxiliary/admin/http/manage_engine_dc_create_admin"
},
{
"name": "20150102 [The ManageOwnage Series, part X]: 0-day administrator account creation in Desktop Central",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2015/Jan/2"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2014-12-31T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-09T18:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://packetstormsecurity.com/files/129769/Desktop-Central-Add-Administrator.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/pedrib/PoC/blob/master/advisories/ManageEngine/me_dc9_admin.txt"
},
{
"name": "71849",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/71849"
},
{
"name": "20141231 [The ManageOwnage Series, part X]: 0-day administrator account creation in Desktop Central",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/534356/100/0/threaded"
},
{
"name": "desktopcentral-cve20147862-sec-bypass(99595)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/99595"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://www.manageengine.com/products/desktop-central/cve20147862-unauthorized-account-creation.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.rapid7.com/db/modules/auxiliary/admin/http/manage_engine_dc_create_admin"
},
{
"name": "20150102 [The ManageOwnage Series, part X]: 0-day administrator account creation in Desktop Central",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://seclists.org/fulldisclosure/2015/Jan/2"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2014-7862",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://packetstormsecurity.com/files/129769/Desktop-Central-Add-Administrator.html",
"refsource": "MISC",
"url": "http://packetstormsecurity.com/files/129769/Desktop-Central-Add-Administrator.html"
},
{
"name": "https://github.com/pedrib/PoC/blob/master/advisories/ManageEngine/me_dc9_admin.txt",
"refsource": "MISC",
"url": "https://github.com/pedrib/PoC/blob/master/advisories/ManageEngine/me_dc9_admin.txt"
},
{
"name": "71849",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/71849"
},
{
"name": "20141231 [The ManageOwnage Series, part X]: 0-day administrator account creation in Desktop Central",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/534356/100/0/threaded"
},
{
"name": "desktopcentral-cve20147862-sec-bypass(99595)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/99595"
},
{
"name": "https://www.manageengine.com/products/desktop-central/cve20147862-unauthorized-account-creation.html",
"refsource": "CONFIRM",
"url": "https://www.manageengine.com/products/desktop-central/cve20147862-unauthorized-account-creation.html"
},
{
"name": "https://www.rapid7.com/db/modules/auxiliary/admin/http/manage_engine_dc_create_admin",
"refsource": "MISC",
"url": "https://www.rapid7.com/db/modules/auxiliary/admin/http/manage_engine_dc_create_admin"
},
{
"name": "20150102 [The ManageOwnage Series, part X]: 0-day administrator account creation in Desktop Central",
"refsource": "FULLDISC",
"url": "http://seclists.org/fulldisclosure/2015/Jan/2"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2014-7862",
"datePublished": "2018-01-04T17:00:00.000Z",
"dateReserved": "2014-10-05T00:00:00.000Z",
"dateUpdated": "2024-08-06T13:03:27.573Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}