PT-2018-13963 · Zoho · Zoho Manageengine Opmanager

Publicado 2018-09-20 · Atualizado 2018-12-03 · CVE-2018-17243

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 12.3 123205

Description The issue allows for SQL Injection in the Global Search feature.

Recommendations For versions prior to 12.3 123205, update to version 12.3 123205 or later to resolve the issue.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2018-17243

Produtos afetados

Zoho Manageengine Opmanager

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-17243 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-17243 · Aviso do Fabricante
• https://manageengine.com/network-monitoring/help/read-me.html · Aviso do Fabricante