Intrusion PreventionLANDesk.Management.Suite.Remote.File.Inclusion
Description
This indicates an attack attempt against a remote File Inclusion vulnerability in LANDesk Management Suite.
The vulnerability is due to insufficient validation of user supplied data. A remote attacker can exploit this by tricking an unsuspecting user into visiting a malicious webpage and execute arbitrary script code within context of the target users' browser.
Affected Products
LANDesk Management Suite prior to 9.6
Impact
System Compromise: Remote attackers can execute arbitrary script code within the context of the target user's browser
Recommended Actions
Currently we are unaware of any vendor supplied patch for this issue
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-06-07 | 14.628 | Severity:medium:high |
| ID | 40851 |
| Created | Jul 08, 2015 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2014-5362 |
| Exploit Prediction Score | 5.91% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |