CVE-2014-6043
ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 - Authenticated Database Access via Direct Request
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-6043. PoCs published by Hans-Martin Muench.
AI-analyzed exploit summary This exploit demonstrates an unauthenticated remote code execution vulnerability in ManageEngine EventLog Analyzer via a malicious ZIP file upload to the 'agentUpload' servlet, allowing arbitrary file placement in the web root. It also highlights an authorization bypass issue enabling low-privileged users to access the database browser.
Description
ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database browser, which allows remote authenticated users to obtain access to the database via a direct request to event/runQuery.do. Fixed in Build 10000.
Exploits (1)
This exploit demonstrates an unauthenticated remote code execution vulnerability in ManageEngine EventLog Analyzer via a malicious ZIP file upload to the 'agentUpload' servlet, allowing arbitrary file placement in the web root. It also highlights an authorization bypass issue enabling low-privileged users to access the database browser.