Lucene search
PRIOn knowledge basePRION:CVE-2014-0344HistoryMar 29, 2014 - 8:55 p.m.
Design/Logic Flaw
2014-03-2920:55:00
PRIOn knowledge base
www.prio-n.com
2
Properties.do in ZOHO ManageEngine OpStor before build 8500 does not properly check privilege levels, which allows remote authenticated users to obtain Admin access by using the name parameter in conjunction with a true value of the edit parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| manageengine_opstor | le | 8.3 |
Related
nvd
nvd
CVE-2014-0344
2014-03-29 20:55:04
CVE-2014-2670
2014-03-29 20:55:04
seebug
seebug
ManageEngine OpStor跨站脚本和特权提升漏洞
2014-03-31 00:00:00
cert
cert
ManageEngine OpStor Build 8300 and earlier contain multiple vulnerabilities
2014-03-27 00:00:00
cvelist
cvelist
CVE-2014-0344
2014-03-29 20:00:00
CVE-2014-2670
2014-03-29 20:00:00
cve
cve
CVE-2014-0344
2014-03-29 20:55:04
CVE-2014-2670
2014-03-29 20:55:04
prion
prion
Cross site scripting
2014-03-29 20:55:00