PatchTheCVEreadydesk vulnerabilities and fixes
Recent CVEs affecting readydesk, with upgrade or downgrade steps. 4 tracked.
readydesk has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2016-08-26. Highest priority: CVE-2016-5050 (score 61/100).
- CVE-2016-5683 HIGH 7.8 DOWNGRADE ReadyDesk 9.1 allows local users to determine cleartext SQL Server credentials by reading the SQL_Config.aspx
- CVE-2016-5050 CRITICAL 9.8 DOWNGRADE Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execu
- CVE-2016-5049 HIGH 7.5 DOWNGRADE Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arb
- CVE-2016-5048 CRITICAL 9.8 DOWNGRADE SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arb
FAQ
How do I fix readydesk vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is readydesk being exploited right now?
None of the tracked readydesk CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which readydesk CVE should I patch first?
CVE-2016-5050 currently ranks highest (61/100): Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execu.