Lucene search
PRIOn knowledge basePRION:CVE-2022-48362HistoryFeb 25, 2023 - 9:15 p.m.
Directory traversal
2023-02-2521:15:00
PRIOn knowledge base
www.prio-n.com
12
zoho manageengine
desktop central
directory traversal
vulnerability
authenticated attacker
cve-2021-44515
code execution
Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadServlet. A remote, authenticated attacker could upload arbitrary code that would be executed when Desktop Central is restarted. (The attacker could authenticate by exploiting CVE-2021-44515.)
| CPE | Name | Operator | Version |
|---|---|---|---|
| manageengine_desktop_central | lt | 10.1.2137.2 | |
| manageengine_desktop_central | lt | 10.1.2137.2 |
Related
cve
cve
CVE-2022-48362
2023-02-25 21:15:10
CVE-2021-44515
2021-12-12 05:15:07
nvd
nvd
CVE-2022-48362
2023-02-25 21:15:10
CVE-2021-44515
2021-12-12 05:15:07
cvelist
cvelist
CVE-2022-48362
2023-02-25 00:00:00
CVE-2021-44515
2021-12-12 04:04:55
nessus
nessus
attackerkb
attackerkb
CVE-2021-44515
2022-01-21 00:00:00
checkpoint_advisories
checkpoint_advisories
Zoho ManageEngine Desktop Central Authentication Bypass (CVE-2021-44515)
2022-03-16 00:00:00
cnvd
cnvd
Zoho ManageEngine Desktop Central MSP Licensing Issue Vulnerability
2021-12-09 00:00:00
nuclei
nuclei
Zoho ManageEngine Desktop Central - Remote Code Execution
2022-04-24 10:12:25
cisa
cisa
Zoho Releases Security Advisory for ManageEngine Desktop Central and Desktop Central MSP
2021-12-06 00:00:00
CISA Adds Thirteen Known Exploited Vulnerabilities to Catalog
2021-12-10 00:00:00
CISA Adds 13 Known Exploited Vulnerabilities to Catalog
2021-12-10 00:00:00
srcincite
srcincite
cisa_kev
cisa_kev
Zoho Desktop Central Authentication Bypass Vulnerability
2021-12-10 00:00:00
prion
prion
Authentication flaw
2021-12-12 05:15:00
hivepro
hivepro
Several Zoho ManageEngine products have been exploited
2021-12-05 12:31:49
threatpost
threatpost
FBI: Another Zoho ManageEngine Zero-Day Under Active Attack
2021-12-21 14:42:02
Critical ManageEngine Desktop Server Bug Opens Orgs to Malware
2022-01-18 15:44:21
thn
thn
Warning: Yet Another Zoho ManageEngine Product Found Under Active Attacks
2021-12-04 05:07:00
Zoho Releases Patch for Critical Flaw Affecting ManageEngine Desktop Central
2022-01-18 05:13:00
rapid7blog
rapid7blog
What's New in InsightVM and Nexpose: Q4 2021 in Review
2022-02-18 14:20:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00