Security Advisory

CVE-2015-2993

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-06-08 14:00:00

Last updated 2024-08-06 05:32:21

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create administrator accounts via a crafted request to /createnewaccount or (2) write to arbitrary files via the fileName parameter to /userentry.

← Browse all CVEs View on cve.org ↗