high7.2
CVE-2014-5362
The admin interface in Landesk Management Suite 9.6 and earlier allows remote attackers to conduct remote file inclusion attacks involving ASPX pages from thir…
Impact
The admin interface in Landesk Management Suite 9.6 and earlier allows remote attackers to conduct remote file inclusion attacks involving ASPX pages from third-party sites via the d parameter to (1) ldms/sm_actionfrm.asp or (2) remote/frm_coremainfrm.aspx; or the (3) top parameter to remote/frm_splitfrm.aspx.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Landesk | Landesk Management Suite | through 9.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/131496/Landesk-Management-Suite-9.5-RFI-CSRF.html
- http://www.securityfocus.com/archive/1/535286/100/1100/threaded
- http://www.securityfocus.com/bid/74190
- http://www.securitytracker.com/id/1032203
- http://packetstormsecurity.com/files/131496/Landesk-Management-Suite-9.5-RFI-CSRF.html
- http://www.securityfocus.com/archive/1/535286/100/1100/threaded
- http://www.securityfocus.com/bid/74190
- http://www.securitytracker.com/id/1032203