High severity · published Apr 22, 2016
CVE-2016-1593
Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute…
7.2
CVSS
64.1%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. (dot dot) in a filename within a multipart/form-data POST request to a LiveTime.woa URL.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)64.1% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SD
Service Desk · Novell
through 7.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-1593
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-1593
packetstormsecurity.com
http://packetstormsecurity.com/files/136717/Novell-ServiceDesk-Authenticated-File-Upload.html
www.rapid7.com
http://www.rapid7.com/db/modules/exploit/multi/http/novell_servicedesk_rce
www.securityfocus.com
http://www.securityfocus.com/archive/1/538043/100/0/threaded
packetstormsecurity.com
https://packetstormsecurity.com/files/136646
raw.githubusercontent.com
https://raw.githubusercontent.com/pedrib/PoC/master/advisories/novell-service-desk-7.1.0.txt
www.exploit-db.com
https://www.exploit-db.com/exploits/39687/
More from Service Desk
6.5
CVE-2016-1595
LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to conduct Hibernate Query Language…
6.5
CVE-2016-1594
Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a request to a LiveTime.woa URL, as demonstrated by obtaining…
5.4
CVE-2016-1596
Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authenticated users to inject arbitrary web script or HTML via a…