CVE-2016-1594

CVE-2016-1594 affects Micro Focus (Novell) Service Desk before 7.2. Remote authenticated users can read arbitrary attachments via LiveTime.woa with downloadLogFiles or downloadFile; impact is information disclosure. Affected product versions and root cause are described, but no explicit patch/fix...

Novell Service Desk 7.1.0/7.0.3 / 6.5 - Multiple Vulnerabilities

Exploit for jsp platform in category web applications Multiple vulnerabilities in Novell Service Desk 7.1.0, 7.0.3 and 6.5 Discovered by Pedro Ribeiro email protected, Agile Information Security ================================================================================= Disclosure: 30/03/20...

Novell ServiceDesk 6.5/7.0.3/7.1.0 - Multiple Vulnerabilities

Multiple vulnerabilities in Novell Service Desk 7.1.0, 7.0.3 and 6.5 Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 30/03/2016 / Last updated: 10/04/2016 Background on the...