CVE-2014-6256: High severity zenoss vulnerability
Published Dec 15, 2014
·Updated
Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions and place files in a directory with public (1) read or (2) execute access via a move action, aka ZEN-15386.
Affected Software
20 affected components
Zenoss Zenoss Core<=5.0.0
Zenoss Zenoss Core=2.4.0
Zenoss Zenoss Core=2.4.5
Zenoss Zenoss Core=2.5.0
Zenoss Zenoss Core=2.5.1
Zenoss Zenoss Core=2.5.2
Zenoss Zenoss Core=3.0.0
Zenoss Zenoss Core=3.0.1
Zenoss Zenoss Core=3.0.2
Zenoss Zenoss Core=3.0.3
Zenoss Zenoss Core=3.1.0
Zenoss Zenoss Core=3.2.0
Zenoss Zenoss Core=3.2.1
Zenoss Zenoss Core=4.2.0
Zenoss Zenoss Core=4.2.3
Zenoss Zenoss Core=4.2.4
Zenoss Zenoss Core=4.2.5
Zenoss Zenoss Core=5.0.0
Zenoss Zenoss Core=5.0.0-beta_1
Zenoss Zenoss Core=5.0.0-beta_2
Event History
Dec 15, 2014
CVE Published
via MITRE·05:27 PM
Data Sourced
via MITRE·05:27 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6256?
CVE-2014-6256 has a medium severity rating due to the potential for unauthorized file access.
2
How do I fix CVE-2014-6256?
To mitigate CVE-2014-6256, upgrade to a version of Zenoss Core that is not affected, specifically versions higher than 5.0.0.
3
What software versions are impacted by CVE-2014-6256?
CVE-2014-6256 affects Zenoss Core versions from 2.4.0 through to 5 Beta 3.
4
Can CVE-2014-6256 be exploited remotely?
Yes, CVE-2014-6256 allows remote attackers to bypass access restrictions and exploit the vulnerability.
5
What type of vulnerability is CVE-2014-6256?
CVE-2014-6256 is a security vulnerability that involves unauthorized file placement in a publicly accessible directory.