RCE in Caldera

CVE-2014-2936

The directory manager in Caldera 9.20 allows remote attackers to conduct variable-injection attacks in the global scope via (1) the maindir_hotfolder parameter to dirmng/index.php, or an unspecified parameter to (2) PPD/index.php, (3) dirmng/docmd.php, or (4) dirmng/param.php.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.016 (73.5th percentile) — read the EPSS interpretation.

Affected products

  • Caldera — versions 9.20
  • N/a — versions n/a

Weakness classification (CWE)

References

  • cret@cert.org (vdb-entry, x_refsource_BID)
  • cret@cert.org (US Government Resource, x_refsource_CERT-VN, Exploit, third-party-advisory)