CVE-2014-5302: Path Traversal
Directory traversal vulnerability in ServiceDesk Plus and Plus MSP v5 through v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4 allows remote authenticated users to execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-5302?
CVE-2014-5302 has a critical severity level due to its ability to allow remote authenticated users to execute arbitrary code.
How do I fix CVE-2014-5302?
To mitigate CVE-2014-5302, upgrade to the latest version of affected software including ServiceDesk Plus, AssetExplorer, SupportCenter, or IT360.
Which applications are affected by CVE-2014-5302?
CVE-2014-5302 affects ManageEngine ServiceDesk Plus, AssetExplorer, SupportCenter, and IT360 versions specified in the vulnerability details.
What type of vulnerability is CVE-2014-5302?
CVE-2014-5302 is classified as a directory traversal vulnerability, allowing unauthorized access to the file system.
Who is impacted by CVE-2014-5302?
Remote authenticated users of the affected ManageEngine products are the primary victims of CVE-2014-5302.