CVE-2014-6261

Mode C: The CVE-2014-6261 issue affects Zenoss Core up to 5 Beta 3, where the Check For Updates feature allows remote code execution via unpickling of potentially unsafe Python objects during version checks (via spoofed callhome server or visiting a crafted site). The vulnerability arises in the ...

CVE-2014-9247

CVE-2014-9247 affects Zenoss Core up to 5 Beta 3, where remote authenticated users can enumerate sensitive data (user accounts, e-mail addresses, and roles) via the ZenUsers (User Manager) page. Root cause details are not provided in the initial description, and exploitation status or patch infor...

CVE-2014-9250

CVE-2014-9250 affects Zenoss Core through 5 Beta 3, where the authentication cookie is sent without the HttpOnly flag in Set-Cookie. This exposes credential information to client-side script access, increasing risk of credential exposure. The document notes mitigation by enabling SSL/HTTPS to bet...

CVE-2014-9251

Zenoss Core up to 5 Beta 3 uses a weak password-hashing algorithm, enabling context-dependent attackers to obtain plaintext passwords by brute-forcing stored hashes in the database (ZEN-15413). CVSS v2 base score 5.0 (Medium) as per NVD.

CVE-2014-9247

Zenoss Core through 5 Beta 3 allows remote authenticated users to obtain sensitive 1 user account, 2 e-mail address, and 3 role information by visiting the ZenUsers aka User Manager page, aka ZEN-15389...

CVE-2014-6261

Zenoss Core through 5 Beta 3 does not properly implement the Check For Updates feature, which allows remote attackers to execute arbitrary code by 1 spoofing the callhome server or 2 deploying a crafted web site that is visited during a login session, aka ZEN-12657...

CVE-2014-6257

Zenoss Core (through 5 Beta 3) contains a systemic authorization bypass (CVE-2014-6257) that lets remote attackers use a web-endpoint URL to invoke an object helper method, bypassing access restrictions. Affects Zenoss Core 4.x/5 Beta 3; no exploit details are provided in the sources. Remediation...

CVE-2014-9252

CVE-2014-9252 affects Zenoss Core through 5 Beta 3, where cleartext passwords are stored in the session database. The underlying issue is plaintext password storage in the server-side session store, potentially allowing local users to read sensitive credentials by inspecting database entries. No ...

CVE-2014-9248

CVE-2014-9248 affects Zenoss Core up to 5 Beta 3, with no password complexity requirements, enabling potential remote brute-force access. The issue is tied to the authentication policy, not a specific code path in isolation. The public materials indicate mitigation by applying Zenoss Core 4.2.5 S...

CVE-2014-6255

CVE-2014-6255 affects Zenoss Core prior to 4.2.5 SP161, with an open redirect in the login form triggered by the came_from parameter. This can enable phishing by redirecting users to arbitrary sites. Remediation: upgrade to Zenoss Core 4.2.5 SP (or later) as indicated by the vendor/update guidanc...

CVE-2014-6253

Multiple cross-site request forgery CSRF vulnerabilities in Zenoss Core through 5 Beta 3 allow remote attackers to hijack the authentication of arbitrary users, aka ZEN-12653...

CVE-2014-9250

Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a Set-Cookie header for the authentication cookie, which makes it easier for remote attackers to obtain credential information via script access to this cookie, aka ZEN-10418...

CVE-2014-6256

Zenoss Core through 5 Beta 3 permits an Authorization Bypass via a move action that lets remote attackers bypass access controls and place files in a directory with public (read or execute) permissions, i.e., ZEN-15386. Affected component is the Zenoss Core web/authorization logic related to file...

CVE-2014-6260

Zenoss Core up to version 5 Beta 3 contains a page-command editing vulnerability (CVE-2014-6260) that does not require a password to modify the pager command string, enabling remote command execution or a paging outage when an unattended workstation is leveraged. Affected product: Zenoss Core thr...

CVE-2014-9386

Zenoss Core before 4.2.5 SP161 sets an infinite lifetime for the session ID cookie, which makes it easier for remote attackers to hijack sessions by leveraging an unattended workstation, aka ZEN-12691...

CVE-2014-6255

Open redirect vulnerability in the login form in Zenoss Core before 4.2.5 SP161 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the camefrom parameter, aka ZEN-11998...

CVE-2014-6257

Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions by using a web-endpoint URL to invoke an object helper method, aka ZEN-15407...

CVE-2014-6258

An unspecified endpoint in Zenoss Core through 5 Beta 3 allows remote attackers to cause a denial of service CPU consumption by triggering an arbitrary regular-expression match attempt, aka ZEN-15411...

CVE-2014-9248

Zenoss Core through 5 Beta 3 does not require complex passwords, which makes it easier for remote attackers to obtain access via a brute-force attack, aka ZEN-15406...

CVE-2014-6256

Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions and place files in a directory with public 1 read or 2 execute access via a move action, aka ZEN-15386...