CVE-2014-8499

Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition before 7.1 build 7105 allow remote authenticated users to execute arbitrary SQL commands via the SEARCH_ALL parameter to (1) SQLAdvancedALSearchResult.cc or (2) AdvancedSearchResult.cc.

CVSS v2.0 6.5 MEDIUM

6.5^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_pmp_privesc.txt	Exploit
http://packetstormsecurity.com/files/129036/Password-Manager-Pro-SQL-Injection.html	Exploit
http://osvdb.org/show/osvdb/114484
http://osvdb.org/show/osvdb/114485
http://www.exploit-db.com/exploits/35210	Exploit
http://www.securityfocus.com/bid/71018
http://seclists.org/fulldisclosure/2014/Nov/18
https://exchange.xforce.ibmcloud.com/vulnerabilities/98597
https://exchange.xforce.ibmcloud.com/vulnerabilities/98595

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:manageengine:password_manager_pro::build_7104:::managed_service_providers:::
	cpe:2.3:a:manageengine:password_manager_pro::build_7104::::::*

Information

Published : 2014-11-17 08:59

Updated : 2017-09-07 18:29

NVD link : CVE-2014-8499

Mitre link : CVE-2014-8499

JSON object : View

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Advertisement

Products Affected

manageengine

password_manager_pro

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_pmp_privesc.txt", "name": "https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_pmp_privesc.txt", "tags": ["Exploit"], "refsource": "MISC"}, {"url": "http://packetstormsecurity.com/files/129036/Password-Manager-Pro-SQL-Injection.html", "name": "http://packetstormsecurity.com/files/129036/Password-Manager-Pro-SQL-Injection.html", "tags": ["Exploit"], "refsource": "MISC"}, {"url": "http://osvdb.org/show/osvdb/114484", "name": "114484", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/show/osvdb/114485", "name": "114485", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.exploit-db.com/exploits/35210", "name": "35210", "tags": ["Exploit"], "refsource": "EXPLOIT-DB"}, {"url": "http://www.securityfocus.com/bid/71018", "name": "71018", "tags": [], "refsource": "BID"}, {"url": "http://seclists.org/fulldisclosure/2014/Nov/18", "name": "20141109 [The ManageOwnage Series, part VII]: Super admin privesc + password DB dump in Password Manager Pro", "tags": [], "refsource": "FULLDISC"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98597", "name": "passwordmanager-cve20148499-sql-injection(98597)", "tags": [], "refsource": "XF"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98595", "name": "pmp-cve20148499-sql-injection(98595)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition before 7.1 build 7105 allow remote authenticated users to execute arbitrary SQL commands via the SEARCH_ALL parameter to (1) SQLAdvancedALSearchResult.cc or (2) AdvancedSearchResult.cc."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-89"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2014-8499", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2014-11-17T16:59Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:manageengine:password_manager_pro:*:build_7104:*:*:managed_service_providers:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "7.1"}, {"cpe23Uri": "cpe:2.3:a:manageengine:password_manager_pro:*:build_7104:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "7.1"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-09-08T01:29Z"}