Vulnerability-Lookup

CNVD-2015-07514

Vulnerability from cnvd - Published: 2015-11-13

Title

Lenovo Switch Center本地提权漏洞

Description

Lenovo Switch Center（前称IBM System Networking Switch Center）是中国联想（Lenovo）公司的一套用来远程监控和管理以太网融合交换机的应用程序。 IBM System Networking Switch Center 7.1.3.4及之前版本和Lenovo Switch Center 8.1.1.0版本存在本地提权漏洞。由于程序允许访问Apache Axis AdminService，本地攻击者可利用该漏洞在服务器中安装任意.jsp文件。

Severity

高

Patch Name

Lenovo Switch Center本地提权漏洞的补丁

Patch Description

Formal description

用户可参考如下供应商提供的安全公告获得补丁信息： https://support.lenovo.com/us/en/product_security/len_2015_074

Reference

http://www.zerodayinitiative.com/advisories/ZDI-15-551

Impacted products

Name
['IBM System Networking Switch Center <=7.3.1.4', 'Lenovo Switch Center 8.1.1.0']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-7818"
    }
  },
  "description": "Lenovo Switch Center\uff08\u524d\u79f0IBM System Networking Switch Center\uff09\u662f\u4e2d\u56fd\u8054\u60f3\uff08Lenovo\uff09\u516c\u53f8\u7684\u4e00\u5957\u7528\u6765\u8fdc\u7a0b\u76d1\u63a7\u548c\u7ba1\u7406\u4ee5\u592a\u7f51\u878d\u5408\u4ea4\u6362\u673a\u7684\u5e94\u7528\u7a0b\u5e8f\u3002\r\n\r\nIBM System Networking Switch Center 7.1.3.4\u53ca\u4e4b\u524d\u7248\u672c\u548cLenovo Switch Center 8.1.1.0\u7248\u672c\u5b58\u5728\u672c\u5730\u63d0\u6743\u6f0f\u6d1e\u3002\u7531\u4e8e\u7a0b\u5e8f\u5141\u8bb8\u8bbf\u95eeApache Axis AdminService\uff0c\u672c\u5730\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u670d\u52a1\u5668\u4e2d\u5b89\u88c5\u4efb\u610f.jsp\u6587\u4ef6\u3002",
  "discovererName": "rgod",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://support.lenovo.com/us/en/product_security/len_2015_074",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-07514",
  "openTime": "2015-11-13",
  "patchDescription": "Lenovo Switch Center\uff08\u524d\u79f0IBM System Networking Switch Center\uff09\u662f\u4e2d\u56fd\u8054\u60f3\uff08Lenovo\uff09\u516c\u53f8\u7684\u4e00\u5957\u7528\u6765\u8fdc\u7a0b\u76d1\u63a7\u548c\u7ba1\u7406\u4ee5\u592a\u7f51\u878d\u5408\u4ea4\u6362\u673a\u7684\u5e94\u7528\u7a0b\u5e8f\u3002\r\nIBM System Networking Switch Center 7.1.3.4\u53ca\u4e4b\u524d\u7248\u672c\u548cLenovo Switch Center 8.1.1.0\u7248\u672c\u5b58\u5728\u672c\u5730\u63d0\u6743\u6f0f\u6d1e\u3002\u7531\u4e8e\u7a0b\u5e8f\u5141\u8bb8\u8bbf\u95eeApache Axis AdminService\uff0c\u672c\u5730\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u670d\u52a1\u5668\u4e2d\u5b89\u88c5\u4efb\u610f.jsp\u6587\u4ef6\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Lenovo Switch Center\u672c\u5730\u63d0\u6743\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "IBM System Networking Switch Center \u003c=7.3.1.4",
      "Lenovo Switch Center 8.1.1.0"
    ]
  },
  "referenceLink": "http://www.zerodayinitiative.com/advisories/ZDI-15-551",
  "serverity": "\u9ad8",
  "submitTime": "2015-11-12",
  "title": "Lenovo Switch Center\u672c\u5730\u63d0\u6743\u6f0f\u6d1e"
}

CVE-2015-7818 (GCVE-0-2015-7818)

Vulnerability from cvelistv5 – Published: 2015-11-12 02:00 – Updated: 2024-08-06 07:59

Summary

The administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows local users to execute arbitrary JSP code with SYSTEM privileges by using the Apache Axis AdminService deployment method to install a .jsp file.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://www.zerodayinitiative.com/advisories/ZDI-15-551/	x_refsource_MISC
	https://support.lenovo.com/us/en/product_security…	x_refsource_CONFIRM

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T07:59:00.649Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-15-551/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/len_2015_074"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-11-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows local users to execute arbitrary JSP code with SYSTEM privileges by using the Apache Axis AdminService deployment method to install a .jsp file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2015-11-12T02:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zerodayinitiative.com/advisories/ZDI-15-551/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.lenovo.com/us/en/product_security/len_2015_074"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-7818",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows local users to execute arbitrary JSP code with SYSTEM privileges by using the Apache Axis AdminService deployment method to install a .jsp file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.zerodayinitiative.com/advisories/ZDI-15-551/",
              "refsource": "MISC",
              "url": "http://www.zerodayinitiative.com/advisories/ZDI-15-551/"
            },
            {
              "name": "https://support.lenovo.com/us/en/product_security/len_2015_074",
              "refsource": "CONFIRM",
              "url": "https://support.lenovo.com/us/en/product_security/len_2015_074"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-7818",
    "datePublished": "2015-11-12T02:00:00.000Z",
    "dateReserved": "2015-10-14T00:00:00.000Z",
    "dateUpdated": "2024-08-06T07:59:00.649Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2015-07514

CVE-2015-7818 (GCVE-0-2015-7818)

Tags

Sightings

Nomenclature