Lucene search
MitreCVELIST:CVE-2022-48362HistoryFeb 25, 2023 - 12:00 a.m.
CVE-2022-48362
2023-02-2500:00:00
mitre
www.cve.org
2
zoho
manageengine
desktop central
msp
directory traversal
computername
agentloguploadservlet
authenticated attacker
arbitrary code
execution
restart
cve-2022-48362
cve-2021-44515
Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadServlet. A remote, authenticated attacker could upload arbitrary code that would be executed when Desktop Central is restarted. (The attacker could authenticate by exploiting CVE-2021-44515.)
Related
nvd
nvd
CVE-2022-48362
2023-02-25 21:15:10
CVE-2021-44515
2021-12-12 05:15:07
prion
prion
Directory traversal
2023-02-25 21:15:00
Authentication flaw
2021-12-12 05:15:00
cve
cve
CVE-2022-48362
2023-02-25 21:15:10
CVE-2021-44515
2021-12-12 05:15:07
cvelist
cvelist
CVE-2021-44515
2021-12-12 04:04:55
nessus
nessus
attackerkb
attackerkb
CVE-2021-44515
2022-01-21 00:00:00
checkpoint_advisories
checkpoint_advisories
Zoho ManageEngine Desktop Central Authentication Bypass (CVE-2021-44515)
2022-03-16 00:00:00
cnvd
cnvd
Zoho ManageEngine Desktop Central MSP Licensing Issue Vulnerability
2021-12-09 00:00:00
nuclei
nuclei
Zoho ManageEngine Desktop Central - Remote Code Execution
2022-04-24 10:12:25
srcincite
srcincite
cisa_kev
cisa_kev
Zoho Desktop Central Authentication Bypass Vulnerability
2021-12-10 00:00:00
cisa
cisa
Zoho Releases Security Advisory for ManageEngine Desktop Central and Desktop Central MSP
2021-12-06 00:00:00
CISA Adds Thirteen Known Exploited Vulnerabilities to Catalog
2021-12-10 00:00:00
CISA Adds 13 Known Exploited Vulnerabilities to Catalog
2021-12-10 00:00:00
hivepro
hivepro
Several Zoho ManageEngine products have been exploited
2021-12-05 12:31:49
threatpost
threatpost
FBI: Another Zoho ManageEngine Zero-Day Under Active Attack
2021-12-21 14:42:02
Critical ManageEngine Desktop Server Bug Opens Orgs to Malware
2022-01-18 15:44:21
thn
thn
Warning: Yet Another Zoho ManageEngine Product Found Under Active Attacks
2021-12-04 05:07:00
Zoho Releases Patch for Critical Flaw Affecting ManageEngine Desktop Central
2022-01-18 05:13:00
rapid7blog
rapid7blog
What's New in InsightVM and Nexpose: Q4 2021 in Review
2022-02-18 14:20:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00