Unscored severity · published May 20, 2014
CVE-2014-3460
Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in Agent Manager in NetIQ Sentinel allows remote attackers to create arbitrary files,…
–
CVSS
3.3%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in Agent Manager in NetIQ Sentinel allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted pathname.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.3% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SE
Sentinel · Microfocus
All versions, or not specified · source: NVD
SA
Sentinel Agent Manager · Microfocus
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3460
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3460
secunia.com
http://secunia.com/advisories/58635
www.novell.com
http://www.novell.com/support/kb/doc.php?id=7015183
www.securityfocus.com
http://www.securityfocus.com/bid/67487
www.securitytracker.com
http://www.securitytracker.com/id/1030434
zerodayinitiative.com
http://zerodayinitiative.com/advisories/ZDI-14-134/
More from Sentinel
7.5
CVE-2017-5185
A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow remote denial of service
5.3
CVE-2018-7675
In NetIQ Sentinel before 8.1.x, a Sentinel user is logged into the Sentinel Web Interface
5.3
CVE-2017-5184
A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information (account enumeration)