Test ID:	1.3.6.1.4.1.25623.1.0.807538
Category:	Web application abuses
Title:	Novell Service Desk Multiple Vulnerabilities
Summary:	Novell Service Desk is prone to multiple vulnerabilities.
Description:	Summary: Novell Service Desk is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - An insufficient validation of user supplied input in the 'import users' and 'file download' functionalities. - A vulnerability in the access control enforcement of the file download functionality. - Insufficient validation of user supplied input via fields 'tf_aClientFirstName', 'tf_aClientLastName' in customer portal, 'ta_selectedTopicContent' in Forums, 'tf_orgUnitName' in User -> Organizational Units and 'manufacturer name', 'address' and 'city' in Configuration -> Vendors, other fields also might be vulnerable. Vulnerability Impact: Successful exploitation will allow remote authenticated attackers to upload arbitrary files to the server and this could lead to remote code execution, to read arbitrary file attachments, to inject arbitrary javascript into the context of other users' browser sessions (including administrative users) and to obtain sensitive information. Affected Software/OS: Novell Service Desk versions 7.0.3 and 7.1 Solution: Update to Novell Service Desk version 7.2 or later. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1593 Bugtraq: 20160410 [Multiple CVE]: RCE, info disclosure, HQL injection and stored XSS in Novell Service Desk 7.1.0 (Google Search) http://www.securityfocus.com/archive/1/538043/100/0/threaded https://www.exploit-db.com/exploits/39687/ https://www.exploit-db.com/exploits/39708/ http://packetstormsecurity.com/files/136717/Novell-ServiceDesk-Authenticated-File-Upload.html http://www.rapid7.com/db/modules/exploit/multi/http/novell_servicedesk_rce https://packetstormsecurity.com/files/136646 https://raw.githubusercontent.com/pedrib/PoC/master/advisories/novell-service-desk-7.1.0.txt Common Vulnerability Exposure (CVE) ID: CVE-2016-1594 Common Vulnerability Exposure (CVE) ID: CVE-2016-1595 Common Vulnerability Exposure (CVE) ID: CVE-2016-1596
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.