Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing RemoteMgmtTaskSave (Automation Tasks) feature and not having a JSESSIONID.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tecknodreams SapphireIMS 访问控制错误漏洞
Vulnerability Description
Tecknodreams SapphireIMS是印度Tecknodreams公司的ITIL 2011 认证的企业级服务管理系统。 Tecknodreams SapphireIMS 5.0版本存在安全漏洞,该漏洞源于直接访问 RemoteMgmtTaskSave功能并且没有 JSESSIONID,可以在任何客户端上创建本地管理员,而无需任何凭据。
CVSS Information
N/A
Vulnerability Type
N/A