CVE-2014-6034: Path Traversal
Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine OpManager 8.8 through 11.3, Social IT Plus 11.0, and IT360 10.4 and earlier allows remote attackers or remote authenticated users to write to and execute arbitrary WAR files via a .. (dot dot) in the regionID parameter.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-6034?
CVE-2014-6034 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2014-6034?
To mitigate CVE-2014-6034, users should apply the latest security patches provided by Zoho for the affected ManageEngine products.
Which products are affected by CVE-2014-6034?
CVE-2014-6034 affects ManageEngine OpManager versions 8.8 to 11.3, Social IT Plus 11.0, and IT360 10.4 and earlier.
Can CVE-2014-6034 be exploited by unauthenticated users?
Yes, CVE-2014-6034 can be exploited by remote attackers, including unauthenticated users, to execute arbitrary code.
What type of vulnerability is CVE-2014-6034?
CVE-2014-6034 is a directory traversal vulnerability that allows attackers to write to and execute arbitrary files.