Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2022-48362
HistoryFeb 25, 2023 - 9:15 p.m.

CVE-2022-48362

2023-02-2521:15:10
CWE-22
[email protected]
web.nvd.nist.gov
52
cve-2022-48362
zoho manageengine
desktop central
directory traversal
agentloguploadservlet
security vulnerability

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9.2 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%

JSON

Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadServlet. A remote, authenticated attacker could upload arbitrary code that would be executed when Desktop Central is restarted. (The attacker could authenticate by exploiting CVE-2021-44515.)

Affected configurations

NVD
Node
zohocorpmanageengine_desktop_centralRange<10.1.2137.2-
OR
zohocorpmanageengine_desktop_centralRange<10.1.2137.2managed_service_providers

Related

nvd 2
cvelist 2
prion 2
nessus 1
cve 1
attackerkb 1
checkpoint_advisories 1
cnvd 1
nuclei 1
srcincite 1
cisa_kev 1
cisa 3
hivepro 1
threatpost 2
thn 2
rapid7blog 1
qualysblog 1
nvd
nvd
CVE-2022-48362
2023-02-25 21:15:10
CVE-2021-44515
2021-12-12 05:15:07
cvelist
cvelist
CVE-2022-48362
2023-02-25 00:00:00
CVE-2021-44515
2021-12-12 04:04:55
prion
prion
Directory traversal
2023-02-25 21:15:00
Authentication flaw
2021-12-12 05:15:00
nessus
nessus
ManageEngine Desktop Central < 10.1.2127.18 / 10.1.2128.0 < 10.1.2137.3 Authentication Bypass (CVE-2021-44515)
2021-12-06 00:00:00
cve
cve
CVE-2021-44515
2021-12-12 05:15:07
attackerkb
attackerkb
CVE-2021-44515
2022-01-21 00:00:00
checkpoint_advisories
checkpoint_advisories
Zoho ManageEngine Desktop Central Authentication Bypass (CVE-2021-44515)
2022-03-16 00:00:00
cnvd
cnvd
Zoho ManageEngine Desktop Central MSP Licensing Issue Vulnerability
2021-12-09 00:00:00
nuclei
nuclei
Zoho ManageEngine Desktop Central - Remote Code Execution
2022-04-24 10:12:25
srcincite
srcincite
SRC-2022-0001 : Zoho ManageEngine Desktop Central StateFilter Arbitrary Forward Authentication Bypass Vulnerability
2019-12-12 00:00:00
cisa_kev
cisa_kev
Zoho Desktop Central Authentication Bypass Vulnerability
2021-12-10 00:00:00
cisa
cisa
Zoho Releases Security Advisory for ManageEngine Desktop Central and Desktop Central MSP
2021-12-06 00:00:00
CISA Adds Thirteen Known Exploited Vulnerabilities to Catalog
2021-12-10 00:00:00
CISA Adds 13 Known Exploited Vulnerabilities to Catalog
2021-12-10 00:00:00
hivepro
hivepro
Several Zoho ManageEngine products have been exploited
2021-12-05 12:31:49
threatpost
threatpost
FBI: Another Zoho ManageEngine Zero-Day Under Active Attack
2021-12-21 14:42:02
Critical ManageEngine Desktop Server Bug Opens Orgs to Malware
2022-01-18 15:44:21
thn
thn
Warning: Yet Another Zoho ManageEngine Product Found Under Active Attacks
2021-12-04 05:07:00
Zoho Releases Patch for Critical Flaw Affecting ManageEngine Desktop Central
2022-01-18 05:13:00
rapid7blog
rapid7blog
What's New in InsightVM and Nexpose: Q4 2021 in Review
2022-02-18 14:20:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9.2 High

AI Score

Confidence

High

0.974 High

EPSS

Percentile

99.9%

JSON
Related for CVE-2022-48362
nvd2cvelist2prion2nessus1cve1attackerkb1checkpoint_advisories1cnvd1nuclei1srcincite1cisa_kev1cisa3hivepro1threatpost2thn2rapid7blog1qualysblog1