Medium severity · published Apr 22, 2016
CVE-2016-1595
LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to conduct Hibernate Query Language…
6.5
CVSS
6.6%
EPSS
No
On KEV
Description
LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to conduct Hibernate Query Language (HQL) injection attacks and obtain sensitive information via the entityName parameter.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)6.6% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SD
Service Desk · Novell
through 7.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-1595
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-1595
www.securityfocus.com
http://www.securityfocus.com/archive/1/538043/100/0/threaded
packetstormsecurity.com
https://packetstormsecurity.com/files/136646
raw.githubusercontent.com
https://raw.githubusercontent.com/pedrib/PoC/master/advisories/novell-service-desk-7.1.0.txt
www.exploit-db.com
https://www.exploit-db.com/exploits/39687/
www.novell.com
https://www.novell.com/support/kb/doc.php?id=7017430
More from Service Desk
7.2
CVE-2016-1593
Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute…
6.5
CVE-2016-1594
Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a request to a LiveTime.woa URL, as demonstrated by obtaining…
5.4
CVE-2016-1596
Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authenticated users to inject arbitrary web script or HTML via a…