CVE-2014-9331: CSRF
Cross-site request forgery (CSRF) vulnerability in ZOHO ManageEngine Desktop Central before 9 build 90130 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via an addUser action to STATEID/1417736606982/roleMgmt.do.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9331?
CVE-2014-9331 is classified as a medium severity vulnerability.
How do I fix CVE-2014-9331?
To fix CVE-2014-9331, you should upgrade your ZOHO ManageEngine Desktop Central to version 9 build 90130 or later.
What type of vulnerability is CVE-2014-9331?
CVE-2014-9331 is a cross-site request forgery (CSRF) vulnerability.
Who can be affected by CVE-2014-9331?
Administrators of ZOHO ManageEngine Desktop Central versions prior to 9 build 90130 can be affected by CVE-2014-9331.
What can attackers do with CVE-2014-9331?
Attackers can hijack administrator authentication to add unauthorized administrator accounts due to CVE-2014-9331.