mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-12 01:02:37 +02:00
868 B
868 B
CVE-2015-2560
Description
Manage Engine Desktop Central 9 before build 90135 allows remote attackers to change passwords of users with the Administrator role via an addOrModifyUser operation to servlets/DCOperationsServlet.
POC
Reference
- http://packetstormsecurity.com/files/131062/Manage-Engine-Desktop-Central-9-Unauthorized-Administrative-Password-Reset.html
- http://packetstormsecurity.com/files/131062/Manage-Engine-Desktop-Central-9-Unauthorized-Administrative-Password-Reset.html
Github
No PoCs found on GitHub currently.