CVE-2014-9249
HighSummary
The default configuration of Zenoss Core before version 5 allows remote attackers to read or modify database information by connecting to unspecified open ports.
Risk Assessment
Attackers may gain access to sensitive data or make unauthorized changes to the database, potentially leading to serious security implications for the organization.
Recommendation
It is recommended to upgrade Zenoss Core to the latest version and secure open ports to limit access to the database.
Other vulnerabilities in Zenoss Core
See all- CVE-2014-6261High
Zenoss Core through 5 Beta 3 does not properly implement the Check For Updates feature, allowing remote attackers to execute arbitrary code by spoofing the callhome server or deploying a crafted web site visited during a login session.
- CVE-2014-6256High
Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions and place files in a directory with public read or execute access via a move action.
Original NVD description (English source)
The default configuration of Zenoss Core before 5 allows remote attackers to read or modify database information by connecting to unspecified open ports, aka ZEN-15408.